网页脚本解密

韩冰

作者：冰狐浪子　　来自：http://www.icyfoxlovelace.com/

一网友给我一加密网页“太乙奇門六壬排盤程式”，其中脚本采用微软工具进行了加[VBScript.Encode]，说是用解密软件不能解密，我看后发现页面编码是UTF-8,改为ANSI后，使用scrdec顺利解密，看来编码问题有的时候满有用的，对于解密失败的朋友可以尝试看下编码格式，因为现在的解码工具好像是针对ANSI编码的！

2 [' y1 g! j3 B9 J2 L9 t5 p

附scrdec1.3源代码[c代码]：

+ w# ^0 f. n! h- M' q4 Z3 v. t" [

/**********************************************************************/ /* scrdec.c - Decoder for Microsoft Script Encoder */ * B7 _) ~( b6 m" e: p/* Version 1.3 */ 0 B' ^0 M5 w. I/* */ /* COPYRIGHT: */ 1 z& x. }' Y5 O/* (c)2000/2001 MrBrownstone, _blank>mrbrownstone@virtualconspiracy.com */ /* Some changes by Joe Steele to correct minor stuff */ 7 O f1 T' l; Q$ {" R/* */ + Q5 m; g4 z" D3 O! B1 O( d% {/* DISCLAIMER: */ 0 z% x: x, Q! X5 u9 q& g6 v/* This program is for demonstrative and educational purposes only. */ /* Use of this program is at your own risk. The author cannot be held */ /* responsible if any laws are broken by use of this program. */ 1 \% M% \, `1 z7 p$ s/* */ 1 S( M" S/ d0 [! T; y6 F/ B. l+ g, _/* If you use or distribute this code, this message should be held */ /* intact. Also, any program based upon this code should display the */ " q; a3 f# W6 R- W3 H) l: D/* copyright message and the disclaimer. */ y v! j% e* F% a: D5 P3 O0 ?# t/**********************************************************************/

% Z' G* T# M) F" r

#include #include & Z, u. r; A8 @, A2 N* W#include

; d8 P7 {' F+ o

#define LEN_OUTBUF 64 #define LEN_INBUF 1024

+ Q Y2 r. F+ d# I

#define STATE_INIT_COPY 100 + K1 I" B; Q& w! G#define STATE_COPY_INPUT 101 ) i+ g$ ~2 ^ h3 r9 ~6 _' L- s+ Y#define STATE_SKIP_ML 102 0 I) k; `# b% A#define STATE_CHECKSUM 103 #define STATE_READLEN 104 , C( z/ K9 e& C% e; K# J+ U. J1 J#define STATE_DECODE 105 7 J. l& q7 S6 ~ Y$ T7 Q1 p0 L7 J4 h#define STATE_UNESCAPE 106 1 V( p% ^1 _, s0 e3 n6 j' T#define STATE_FLUSHING 107 #define STATE_DBCS 108 #define STATE_INIT_READLEN 109

unsigned char rawData[292] = { , c w, i" u/ I; B 0x64,0x37,0x69, 0x50,0x7E,0x2C, 0x22,0x5A,0x65, 0x4A,0x45,0x72, 0x61,0x3A,0x5B, 0x5E,0x79,0x66, 0x5D,0x59,0x75, 0x5B,0x27,0x4C, 8 E' Y& T* a$ N: T 0x42,0x76,0x45, 0x60,0x63,0x76, 0x23,0x62,0x2A, 0x65,0x4D,0x43, 0x5F,0x51,0x33, 0x7E,0x53,0x42, 0x4F,0x52,0x20, 0x52,0x20,0x63, & X6 z! k3 E, i& N 0x7A,0x26,0x4A, 0x21,0x54,0x5A, 0x46,0x71,0x38, 0x20,0x2B,0x79, 0x26,0x66,0x32, 0x63,0x2A,0x57, 0x2A,0x58,0x6C, 0x76,0x7F,0x2B, 0x47,0x7B,0x46, 0x25,0x30,0x52, 0x2C,0x31,0x4F, 0x29,0x6C,0x3D, . B9 g* U: S. V7 l# } 0x69,0x49,0x70, 0x3F,0x3F,0x3F, 0x27,0x78,0x7B, 0x3F,0x3F,0x3F, 7 A& c3 \% m6 o 0x67,0x5F,0x51, 0x3F,0x3F,0x3F, 0x62,0x29,0x7A, 0x41,0x24,0x7E, / t6 d2 l$ w! d3 x6 E 0x5A,0x2F,0x3B, 0x66,0x39,0x47, 0x32,0x33,0x41, 0x73,0x6F,0x77, . l2 P; m- w6 @& a 0x4D,0x21,0x56, 0x43,0x75,0x5F, 0x71,0x28,0x26, 0x39,0x42,0x78, ! H' a- R2 D5 G" { 0x7C,0x46,0x6E, 0x53,0x4A,0x64, 0x48,0x5C,0x74, 0x31,0x48,0x67, & y y# N/ R% r Z2 n D. P 0x72,0x36,0x7D, 0x6E,0x4B,0x68, 0x70,0x7D,0x35, 0x49,0x5D,0x22, : n5 c! J4 T2 W6 k5 K; z# I, e. S0 {" K 0x3F,0x6A,0x55, 0x4B,0x50,0x3A, 0x6A,0x69,0x60, 0x2E,0x23,0x6A, 0x7F,0x09,0x71, 0x28,0x70,0x6F, 0x35,0x65,0x49, 0x7D,0x74,0x5C, 0x24,0x2C,0x5D, 0x2D,0x77,0x27, 0x54,0x44,0x59, 0x37,0x3F,0x25, , i: o% o$ @# W: ^7 k; F! D 0x7B,0x6D,0x7C, 0x3D,0x7C,0x23, 0x6C,0x43,0x6D, 0x34,0x38,0x28, 5 x2 q4 r( r$ Z- _ 0x6D,0x5E,0x31, 0x4E,0x5B,0x39, 0x2B,0x6E,0x7F, 0x30,0x57,0x36, ; _( E1 U& \+ z9 y8 d( J 0x6F,0x4C,0x54, 0x74,0x34,0x34, 0x6B,0x72,0x62, 0x4C,0x25,0x4E, 0x33,0x56,0x30, 0x56,0x73,0x5E, 0x3A,0x68,0x73, 0x78,0x55,0x09, : w2 C% r7 b. @- d 0x57,0x47,0x4B, 0x77,0x32,0x61, 0x3B,0x35,0x24, 0x44,0x2E,0x4D, 0x2F,0x64,0x6B, 0x59,0x4F,0x44, 0x45,0x3B,0x21, 0x5C,0x2D,0x37, 0x68,0x41,0x53, 0x36,0x61,0x58, 0x58,0x7A,0x48, 0x79,0x22,0x2E, 0x09,0x60,0x50, 0x75,0x6B,0x2D, 0x38,0x4E,0x29, 0x55,0x3D,0x3F, # H4 x% ~1 I s0 }8 \ 0x51,0x67,0x2f ) U* y. r/ N8 D0 |$ n5 X$ i+ z: o} ;

const unsigned char pick_encoding[64] = { 1, 2, 0, 1, 2, 0, 2, 0, 0, 2, 0, 2, 1, 0, 2, 0, , z/ e. @$ @7 {. ]& w8 T1, 0, 2, 0, 1, 1, 2, 0, 0, 2, 1, 0, 2, 0, 0, 2, * S% p4 S0 X# v+ e5 [+ g1, 1, 0, 2, 0, 2, 0, 1, 0, 1, 1, 2, 0, 1, 0, 2, 1, 0, 2, 0, 1, 1, 2, 0, 0, 1, 1, 2, 0, 1, 0, 2 };

9 V r3 \* A; i0 p

unsigned char transformed[3][128]; Y" f6 i: I: h$ t- @( d2 rint digits[0x7b];

: P) z0 F8 \3 T0 t: ]: \9 e

unsigned char unescape (unsigned char c) { static unsigned char escapes[] = "#&!*$"; 1 O! U3 j' H1 g) K5 P static unsigned char escaped[] = "\r\n<>@"; / p3 y6 M& B6 {3 ? int i=0;

8 {" a" y" `, j# W& Y9 i& w

if (c > 127) return c; . r$ ~) _5 p' c. _7 y while (escapes) " h9 q7 |! V# ^. E( _7 ` { if (escapes == c) ( o1 Y/ s8 T; e6 L! G5 e7 G return escaped; 8 d- U) H% u% \: I; F i++; 1 p Q3 ], }; h/ K } 3 T/ i) B l3 P/ i9 R* I return '?'; }

0 _, \- U _; y

void maketrans (void) # E3 C* j* x$ z" R/ D{ int i, j;

for (i=31; i<=127; i++) 0 Q% m0 x. |' N% Q7 h for (j=0; j<3; j++) + I: n* A6 }: ]7 R transformed[j][rawData[(i-31)*3 + j]] = (i==31) ? 9 : i; * B R7 }/ K. u9 Z" g}

韩冰

void makedigits (void) 0 h# J) q7 W l5 O n% m3 A{ ) i. S1 {8 c# u" F9 O4 E% M int i;

for (i=0; i<26; i++) 0 t. Z; o$ q3 b { 4 x" c( u2 d) n( d6 f! H digits['A'+i] = i; + d8 l8 Q/ U3 a# R% ^- c+ E% U digits['a'+i] = i+26; } for (i=0; i<10; i++) * n; d& i2 t- A2 o3 v digits['0'+i] = i+52; # {; g( ~5 T/ ^8 j0 m digits[0x2b] = 62; : G2 R- _' W) O R# u. [7 @ digits[0x2f] = 63; }

unsigned long int decodeBase64 (unsigned char *p) 4 A7 a7 [" S# i# S* R{ " c/ L1 i& w6 M* ]7 A5 W! ~ unsigned long int val = 0;

val += (digits[p[0]] << 2); val += (digits[p[1]] >> 4); val += (digits[p[1]] & 0xf) << 12; val += ((digits[p[2]] >> 2) << 8); val += ((digits[p[2]] & 0x3) << 22); 4 ^% z4 V$ w: z$ q val += (digits[p[3]] << 16); val += ((digits[p[4]] << 2) << 24); : _4 Y" F- C% g y% f4 r val += ((digits[p[5]] >> 4) << 24);

/* 543210 543210 543210 543210 543210 543210

765432 10 ba98 fedc 76 + D3 Y9 |9 Y: u 543210 % s' p e3 ~$ ?' O E fedcba 98---- ) l& b, c8 P9 I4 b3 y$ k |- LSB -||- -||- -| |- MSB -| */ return val; , c0 i2 l! K( e& }& i}

int isLeadByte (unsigned int cp, unsigned char ucByte) . c8 ?/ g* q8 u/ n: q# j. t{ /* Code page 932 - Japanese Shift-JIS - 0x81-0x9f 5 g* i5 q' ^6 j, n+ X3 V 0xe0-0xfc 936 - Simplified Chinese GBK - 0xa1-0xfe ; `9 Q: {* _6 [2 N$ F9 Q 949 - Korean Wansung - 0x81-0xfe 950 - Traditional Chinese Big5 - 0x81-0xfe 5 A8 U$ Y, I- G: O! [ 1361 - Korean Johab - 0x84-0xd3 0xd9-0xde 0xe0-0xf9 */ switch (cp) 9 u4 k; Q6 k0 Z$ C3 \& ~" s { # r0 Q. t8 b7 e, _/ f5 d4 c! O. X$ } case 932: if ((ucByte > 0x80) && (ucByte < 0xa0)) return 1; if ((ucByte > 0xdf) && (ucByte < 0xfd)) return 1; else return 0; * v" f, d) Q# G9 A: g7 k case 936: 0 e; [0 t" Z' |8 d1 U if ((ucByte > 0xa0) && (ucByte < 0xff)) return 1; 1 m. H8 ?& N! F2 h* S' F- n( t7 N+ h else return 0; 3 R" \8 ]+ _% Q& a8 `2 | case 949: 3 M7 A/ |/ E$ q, C: u case 950: ( S( t$ y: ], q6 v0 u2 h- v if ((ucByte > 0x80) && (ucByte < 0xff)) return 1; else return 0; case 1361: " G. }2 z: F( _% m- P if ((ucByte > 0x83) && (ucByte < 0xd4)) return 1; 2 r+ ~- j' ] t5 d if ((ucByte > 0xd8) && (ucByte < 0xdf)) return 1; , B- S5 [7 D9 ~) [& X7 R7 w; ` if ((ucByte > 0xdf) && (ucByte < 0xfa)) return 1; 1 i% b6 Q0 X. Q% O9 Y else return 0; default: ! L; x( H+ m9 v% P8 S8 R( |9 C return 0; 1 k1 g$ N9 u5 @! d( Y; }0 P: e }

}

int ScriptDecoder (unsigned char *inname, unsigned char *outname, unsigned int cp) { unsigned char inbuf[LEN_INBUF+1]; 9 p" w3 a, X7 n3 r0 X unsigned char outbuf[LEN_OUTBUF+1]; unsigned char c, lenbuf[7], csbuf[7]; unsigned char marker[] = "#@~^"; int nextstate, state = 0; 4 E2 ]0 o1 ]% d E$ E+ c int i, j, k, m, ml = 0; unsigned long int csum = 0, len = 0; , i7 }4 I( m$ |4 N# L. M FILE *infile, *outfile;

infile = fopen (inname, "rb"); outfile = fopen (outname, "wb"); if (!infile || !outfile) { 5 I- F0 H, @4 b! q( S printf ("Error opening file!\n"); return 10; } 7 h- T" R# M* E# X3 Y 9 ^$ M: P: U( O0 G, g maketrans(); 6 u1 P% D+ E) v: r makedigits(); memset (inbuf, 0, sizeof (inbuf)); ' Z3 e& L! `! O; a+ G$ a: G memset (outbuf, 0, sizeof (outbuf)); & m2 |: } m |; i( | memset (lenbuf, 0, sizeof (lenbuf)); " O- E# t+ U; F& U+ H7 M state = STATE_INIT_COPY; i = 0; j = 0;

while (state) { if (inbuf == 0) { / |5 T$ k- t/ K2 ^; n1 [2 t if (feof (infile)) # I# s0 N: t4 E' p/ Z break;

memset (inbuf, 0, sizeof (inbuf)); fgets (inbuf, LEN_INBUF, infile); i = 0; # k/ S* R7 S! R* W3 I2 K, h' z continue; : Q; m' P0 j+ T2 X' R6 b0 _: V }

if (j == LEN_OUTBUF) { fwrite (outbuf, sizeof(char), j, outfile); 3 c- Y* C2 t+ x' B; ]1 J$ ?8 W j = 0; 0 E9 H8 `& v% L6 d5 S& t }

switch (state) ; l( r: h/ P* J$ @4 ^7 f { case STATE_INIT_COPY: ml = strlen (marker); m = 0; state = STATE_COPY_INPUT; . z! y1 d$ ~' d& k! Y( ^+ |. R break;

韩冰

case STATE_COPY_INPUT: if (inbuf == marker[m]) { i++; ' x7 Y$ l* c2 X* \ m++; " e# S( f9 z) N- X } 5 c9 [& K- R4 O; ]. Z- U' C else ) D$ ~. e4 `) d& O+ B7 _ { if (m) { k = 0; state = STATE_FLUSHING; } else 8 P2 }2 v$ A0 B) T7 }- X8 ~0 u6 h outbuf[j++] = inbuf[i++];

} if (m == ml) state = STATE_INIT_READLEN; break;

case STATE_FLUSHING: * N+ ]4 V) D5 [0 y1 s' J outbuf[j++] = marker[k++]; m--; if (m==0) 9 |! h9 g$ n, u9 U! ]2 q state = STATE_COPY_INPUT; break; case STATE_SKIP_ML: $ I. o3 ^0 W R' |' M i++; # H; K7 Q8 g) s: H6 t6 q% K if (!(--ml)) $ m. D" w0 F* U1 h+ v" V9 L state = nextstate; . U) g( u# U: T/ D8 C: M+ x break;

8 y1 P+ U. N% N9 _( ]7 q case STATE_INIT_READLEN: ml = 6; state = STATE_READLEN; ) F* X# \- P1 a1 m X1 t break;

case STATE_READLEN: lenbuf[6-ml] = inbuf[i++]; . G! E* m, k* m& d if (!(--ml)) { 0 g$ f/ A, q! n# u! Q3 C3 ~ len = decodeBase64 (lenbuf); 6 v' u1 f# S. u* ]( T m = 0; ml = 2; 3 w/ b! \- Y0 H4 D6 U K9 k7 K state = STATE_SKIP_ML; nextstate = STATE_DECODE; ) Q4 A7 D- K0 {& \ } 1 Z9 n5 J9 O& I break;

case STATE_DECODE: : ~' j& T' C3 q* `. k9 G: g9 P if (!len) / d. Q- T7 a/ [ { ) w8 F/ F4 ~: A: X ml = 6; * L7 p, e# H4 v: R state = STATE_CHECKSUM; 7 l7 y: d. C$ A& ^2 Z. w' P7 l break; % y& @4 `% {7 B% ~ } if (inbuf == _blank>'@') : L8 F: \4 X0 o; U% O# | P state = STATE_UNESCAPE; 7 x; T( v& {; z, F" O0 r0 ~ else % n- a2 p o" I% n( }4 K2 u; V { if (inbuf < 0x80) { 7 c( A( z C5 P- m# l# g# X outbuf[j++] = c = transformed[pick_encoding[m%64]][inbuf]; csum += c; 9 W5 x* H9 K5 J1 T. C& E m++; 1 X8 z! _& Q6 l! S6 l+ s! I& [ } else { Z; g: f0 ?, c8 s: a5 C8 P outbuf[j++] = inbuf; if ((cp) && (isLeadByte (cp,inbuf))) state = STATE_DBCS; }

} i++; len--; , N9 [! x3 A( \" I0 I& X( Z5 d) a break;

case STATE_DBCS: outbuf[j++] = inbuf[i++]; - L& B2 F7 I0 W. z state = STATE_DECODE; break; . i( |, D6 q3 k: C case STATE_UNESCAPE: outbuf[j++] = c = unescape (inbuf[i++]); @" d! M2 X, E% K6 i csum += c; ) l6 A' B& X/ U5 D# J. e len--; s: W7 c# W7 d4 h0 E! A* m, p m++; 5 m) Z. K* Q: u6 Z* z, {0 | state = STATE_DECODE; ; J, ^7 R: e0 j% P+ ?1 K break;

case STATE_CHECKSUM: csbuf[6-ml] = inbuf[i++]; $ Y4 b- X7 K6 u; \0 J if (!(--ml)) { % b2 w/ a4 E0 M& B csum -= decodeBase64 (csbuf); 9 R& s4 B% V2 l, b. n5 a if (csum) { //printf ("Error - Incorrect checksum! (%lu)\n", csum); ! C& ]. c" R$ S3 e6 P- q //csum=0; 此处注释掉好点，不然好多时候不能解密 嘿嘿 [icyfox] - I7 f/ L& k- @# U1 }# y7 c% c } m = 0; ml = 6; 0 x4 p5 Y8 h1 C/ B state = STATE_SKIP_ML; nextstate = STATE_INIT_COPY; - n; t' T0 O: i) z% D } 0 P/ p" J! g# P& ?! v break;

default: printf ("Invalid state: %d\n", state); break; } } fwrite (outbuf, sizeof (char), j, outfile); fclose (infile); fclose (outfile); return 0; & Z {5 `4 U" H/ U: ^}

int main (int argc, char **argv) ( Q9 |6 i! J# C2 m4 z* h{ int cp = 0;

if (argc < 3) { printf ("Decoder for Microsoft Script Encoder v1.3\n" "(c)2000/2001 MrBrownstone, _blank>mrbrownstone@virtualconspiracy.com\n" "Home page: _blank>http://www.virtualconspiracy.com/scrdec.html\n\n" "Usage: scrdec13 [codepage]\n\n" "Code pages can be 932 - Japanese\n" 7 A8 r0 g$ D# g7 h+ W# W " 936 - Chinese (Simplified)\n" ( T& E1 K3 K& w' O% ~$ p " 950 - Chinese (Traditional)\n" " 949 - Korean (Wansung)\n" 5 E' L& u" a8 |0 c) Q2 s( Y " 1361 - Korean (Johab)\n" / { u" g$ k ?* }) K "Any other code pages don't need to be specified.\n"); return 10; }

if (argc > 3) cp = atoi (argv[3]); return ScriptDecoder (argv[1], argv[2], cp); }