网页脚本解密

韩冰

作者：冰狐浪子　　来自：http://www.icyfoxlovelace.com/

一网友给我一加密网页“太乙奇門六壬排盤程式”，其中脚本采用微软工具进行了加[VBScript.Encode]，说是用解密软件不能解密，我看后发现页面编码是UTF-8,改为ANSI后，使用scrdec顺利解密，看来编码问题有的时候满有用的，对于解密失败的朋友可以尝试看下编码格式，因为现在的解码工具好像是针对ANSI编码的！

附scrdec1.3源代码[c代码]：

/**********************************************************************/ * I. ]1 N/ p# u, `. E/ O3 U/* scrdec.c - Decoder for Microsoft Script Encoder */ /* Version 1.3 */ ) t- Z5 g- }. _% p( F2 P4 R/* */ /* COPYRIGHT: */ /* (c)2000/2001 MrBrownstone, _blank>mrbrownstone@virtualconspiracy.com */ /* Some changes by Joe Steele to correct minor stuff */ /* */ /* DISCLAIMER: */ /* This program is for demonstrative and educational purposes only. */ : @0 @7 a5 x6 G* d; D* |/* Use of this program is at your own risk. The author cannot be held */ 8 @# S% ?& V5 o- R/* responsible if any laws are broken by use of this program. */ /* */ % M! X- H5 `3 e3 p, Y/* If you use or distribute this code, this message should be held */ /* intact. Also, any program based upon this code should display the */ /* copyright message and the disclaimer. */ /**********************************************************************/

- _9 X' i5 j# s; V- q

#include 2 P: g4 \4 L2 P5 G% L9 q#include #include

, M$ @' |" n P7 F) _

#define LEN_OUTBUF 64 : X; L/ N* l: D0 B$ L#define LEN_INBUF 1024

#define STATE_INIT_COPY 100 #define STATE_COPY_INPUT 101 #define STATE_SKIP_ML 102 #define STATE_CHECKSUM 103 7 ?: F; g9 z; r#define STATE_READLEN 104 # q& `8 R) z, B4 u#define STATE_DECODE 105 6 w% G" p9 ~4 E0 w, I7 P#define STATE_UNESCAPE 106 #define STATE_FLUSHING 107 8 L- `8 g) T) O. l5 ^#define STATE_DBCS 108 # u( n0 o* h$ c& L#define STATE_INIT_READLEN 109

unsigned char rawData[292] = { 9 b) T& I2 H$ l' i3 L" E2 \ 0x64,0x37,0x69, 0x50,0x7E,0x2C, 0x22,0x5A,0x65, 0x4A,0x45,0x72, $ \3 H+ Z0 h8 g# h3 F; {5 ? 0x61,0x3A,0x5B, 0x5E,0x79,0x66, 0x5D,0x59,0x75, 0x5B,0x27,0x4C, 0x42,0x76,0x45, 0x60,0x63,0x76, 0x23,0x62,0x2A, 0x65,0x4D,0x43, 0x5F,0x51,0x33, 0x7E,0x53,0x42, 0x4F,0x52,0x20, 0x52,0x20,0x63, ^% l& g. |9 d- `3 P* J4 b, i. i 0x7A,0x26,0x4A, 0x21,0x54,0x5A, 0x46,0x71,0x38, 0x20,0x2B,0x79, ' v5 a: q) ^. ?0 v/ O 0x26,0x66,0x32, 0x63,0x2A,0x57, 0x2A,0x58,0x6C, 0x76,0x7F,0x2B, / L, L; _8 D5 a 0x47,0x7B,0x46, 0x25,0x30,0x52, 0x2C,0x31,0x4F, 0x29,0x6C,0x3D, ! M% z$ N5 E1 R5 |: @( f 0x69,0x49,0x70, 0x3F,0x3F,0x3F, 0x27,0x78,0x7B, 0x3F,0x3F,0x3F, 0x67,0x5F,0x51, 0x3F,0x3F,0x3F, 0x62,0x29,0x7A, 0x41,0x24,0x7E, 0x5A,0x2F,0x3B, 0x66,0x39,0x47, 0x32,0x33,0x41, 0x73,0x6F,0x77, 1 b) H- K6 W) B0 z% v5 J 0x4D,0x21,0x56, 0x43,0x75,0x5F, 0x71,0x28,0x26, 0x39,0x42,0x78, 9 O" ?; J9 H4 M 0x7C,0x46,0x6E, 0x53,0x4A,0x64, 0x48,0x5C,0x74, 0x31,0x48,0x67, 0x72,0x36,0x7D, 0x6E,0x4B,0x68, 0x70,0x7D,0x35, 0x49,0x5D,0x22, $ @8 Q: C9 y& P, x5 ?# z5 s 0x3F,0x6A,0x55, 0x4B,0x50,0x3A, 0x6A,0x69,0x60, 0x2E,0x23,0x6A, . T8 @* S, u1 B 0x7F,0x09,0x71, 0x28,0x70,0x6F, 0x35,0x65,0x49, 0x7D,0x74,0x5C, 0x24,0x2C,0x5D, 0x2D,0x77,0x27, 0x54,0x44,0x59, 0x37,0x3F,0x25, 0x7B,0x6D,0x7C, 0x3D,0x7C,0x23, 0x6C,0x43,0x6D, 0x34,0x38,0x28, Z$ E2 f2 R. t6 T; i( g5 x 0x6D,0x5E,0x31, 0x4E,0x5B,0x39, 0x2B,0x6E,0x7F, 0x30,0x57,0x36, 8 v: N, Q: Z2 ]+ M 0x6F,0x4C,0x54, 0x74,0x34,0x34, 0x6B,0x72,0x62, 0x4C,0x25,0x4E, 0x33,0x56,0x30, 0x56,0x73,0x5E, 0x3A,0x68,0x73, 0x78,0x55,0x09, 0x57,0x47,0x4B, 0x77,0x32,0x61, 0x3B,0x35,0x24, 0x44,0x2E,0x4D, 0x2F,0x64,0x6B, 0x59,0x4F,0x44, 0x45,0x3B,0x21, 0x5C,0x2D,0x37, 0x68,0x41,0x53, 0x36,0x61,0x58, 0x58,0x7A,0x48, 0x79,0x22,0x2E, ?& L6 R! ]- ] 0x09,0x60,0x50, 0x75,0x6B,0x2D, 0x38,0x4E,0x29, 0x55,0x3D,0x3F, 6 V6 q9 Q' X+ V# U5 P( j, Z2 Q 0x51,0x67,0x2f w- `8 W' N. G. r) y5 F} ;

const unsigned char pick_encoding[64] = { / t9 k: x4 I* I% P; j9 J+ l4 `1, 2, 0, 1, 2, 0, 2, 0, 0, 2, 0, 2, 1, 0, 2, 0, 1, 0, 2, 0, 1, 1, 2, 0, 0, 2, 1, 0, 2, 0, 0, 2, ! Q, L" a7 y: ~* l$ Q8 |( R1 I1, 1, 0, 2, 0, 2, 0, 1, 0, 1, 1, 2, 0, 1, 0, 2, 1, 0, 2, 0, 1, 1, 2, 0, 0, 1, 1, 2, 0, 1, 0, 2 };

unsigned char transformed[3][128]; int digits[0x7b];

unsigned char unescape (unsigned char c) { static unsigned char escapes[] = "#&!*$"; 5 ?5 ], _0 s- N+ o static unsigned char escaped[] = "\r\n<>@"; int i=0;

9 S; a- I( p! j" U4 V( W

if (c > 127) return c; while (escapes) 3 [" ~! T5 ?- A7 \. [ j { if (escapes == c) return escaped; 7 b ^: `$ |9 z i++; / J J+ O# L2 ?9 H8 K) B4 N } # g1 Z4 b6 p4 ~ d return '?'; }

void maketrans (void) & `8 P3 @/ P1 }7 }{ int i, j;

5 _0 x' m$ D# K! g0 J

for (i=31; i<=127; i++) for (j=0; j<3; j++) / E6 U4 O* j# G: \% { transformed[j][rawData[(i-31)*3 + j]] = (i==31) ? 9 : i; }

韩冰

void makedigits (void) ! ]4 S# V. c- M5 i5 [3 n3 t{ 5 c1 G4 a% L3 K) T int i;

for (i=0; i<26; i++) { - ]+ Q0 V6 p( z. v$ {0 F3 z) I0 [ digits['A'+i] = i; $ y" z) B D8 |' g) U+ Q; P digits['a'+i] = i+26; } : y& m" ]. ~" K2 S2 \ for (i=0; i<10; i++) digits['0'+i] = i+52; " P$ v2 o# J! D7 e digits[0x2b] = 62; digits[0x2f] = 63; / I$ }) w# E2 g$ K8 S& H7 r}

unsigned long int decodeBase64 (unsigned char *p) " E ^& w# j+ _ p1 O* V. P' i{ unsigned long int val = 0;

val += (digits[p[0]] << 2); val += (digits[p[1]] >> 4); val += (digits[p[1]] & 0xf) << 12; val += ((digits[p[2]] >> 2) << 8); 3 U+ p+ }# }8 M- G# t- q0 e val += ((digits[p[2]] & 0x3) << 22); val += (digits[p[3]] << 16); % k; @, D9 B9 U, Y9 }0 |: g val += ((digits[p[4]] << 2) << 24); # }7 g' q" @8 B8 | ~ val += ((digits[p[5]] >> 4) << 24);

/* 543210 543210 543210 543210 543210 543210

765432 & G: i) c; B" O- ] r, P8 W5 X7 P5 i- V 10 ( v4 [2 S$ W& T1 E3 _ ba98 * c7 R d' [* d fedc 76 . Q3 w0 @' V; d4 ~/ c 543210 : O3 H; C, ~4 Z fedcba 98---- |- LSB -||- -||- -| |- MSB -| */ return val; }

int isLeadByte (unsigned int cp, unsigned char ucByte) # W" k+ @) Q6 x9 G% }7 d{ ( _! e. W3 w" e1 u3 A, l o8 H* F* y+ ` /* Code page 932 - Japanese Shift-JIS - 0x81-0x9f 0xe0-0xfc 936 - Simplified Chinese GBK - 0xa1-0xfe 949 - Korean Wansung - 0x81-0xfe % ?0 g. i7 Y0 ]; B3 q+ H: ]4 [% d 950 - Traditional Chinese Big5 - 0x81-0xfe 3 G6 E J0 b6 G) | 1361 - Korean Johab - 0x84-0xd3 . D* Y' `# v% d 0xd9-0xde 0xe0-0xf9 */ 4 X, ~$ `& _# T/ r switch (cp) { case 932: if ((ucByte > 0x80) && (ucByte < 0xa0)) return 1; * j0 q$ B2 I" ?4 n8 M; { if ((ucByte > 0xdf) && (ucByte < 0xfd)) return 1; else return 0; case 936: 3 Z5 F) M5 \: f" B3 i) R @ if ((ucByte > 0xa0) && (ucByte < 0xff)) return 1; 9 p2 V+ ]7 V/ L# Y* W* n0 D. k else return 0; 0 O% A! Z4 K" Y5 O case 949: case 950: if ((ucByte > 0x80) && (ucByte < 0xff)) return 1; else return 0; h9 z! G( X8 e* A case 1361: ' R* M3 ^0 [) B; l+ P% e1 ?2 Q if ((ucByte > 0x83) && (ucByte < 0xd4)) return 1; 8 ], h3 i8 O# y7 @# _: k if ((ucByte > 0xd8) && (ucByte < 0xdf)) return 1; if ((ucByte > 0xdf) && (ucByte < 0xfa)) return 1; : n2 M1 N" S, ^4 {/ [ else return 0; default: return 0; ( D" \' U7 K+ b$ { }

}

, M+ H/ W$ t1 V$ {- Rint ScriptDecoder (unsigned char *inname, unsigned char *outname, unsigned int cp) , A$ f6 m, `1 m ^6 _# E. }{ $ M8 L3 a6 [$ F$ j& L0 \, p1 l8 P unsigned char inbuf[LEN_INBUF+1]; 4 G% g3 ~, ~4 D( _# a unsigned char outbuf[LEN_OUTBUF+1]; , k0 Y/ D2 T5 o2 I unsigned char c, lenbuf[7], csbuf[7]; unsigned char marker[] = "#@~^"; int nextstate, state = 0; int i, j, k, m, ml = 0; 3 A- w( p9 _' f4 c unsigned long int csum = 0, len = 0; . E1 G* Q2 [3 b; C B FILE *infile, *outfile;

infile = fopen (inname, "rb"); ) d4 X8 ~! Y6 C( ?2 Z, @$ J outfile = fopen (outname, "wb"); ( o/ s4 e$ {/ I: k, d# p if (!infile || !outfile) { printf ("Error opening file!\n"); $ q8 z; T2 c' k( _3 [/ J( Y/ q6 {& ^ return 10; } maketrans(); makedigits(); memset (inbuf, 0, sizeof (inbuf)); memset (outbuf, 0, sizeof (outbuf)); memset (lenbuf, 0, sizeof (lenbuf)); state = STATE_INIT_COPY; 9 |. d# N, M- t4 m i = 0; 1 I) z* o7 l1 y* n" I0 l j = 0;

while (state) - P: M# {) `$ F! i9 J, y& u) C { if (inbuf == 0) 4 f, d T. O1 t9 Y { + ?3 a ?( x% I& }1 Y( l; G if (feof (infile)) 3 H! D1 j' E0 H" Q: b. X break;

memset (inbuf, 0, sizeof (inbuf)); fgets (inbuf, LEN_INBUF, infile); # A: B ^4 ]5 l' c* R: k i = 0; ' n) V/ P% r3 }6 N continue; 5 f+ C, Y: X# I& q9 \" G }

if (j == LEN_OUTBUF) { 0 a' \" O) P- D+ K$ r fwrite (outbuf, sizeof(char), j, outfile); j = 0; }

switch (state) 0 ~& K. U( {( G0 E# q' m { 7 C0 E5 N% ^0 X q" |2 s case STATE_INIT_COPY: ml = strlen (marker); 8 I( R6 V( n# i& q# m4 d+ E m = 0; state = STATE_COPY_INPUT; 9 }5 l2 ~7 t6 V, j; W, j# v break;

韩冰

case STATE_COPY_INPUT: 4 }( X; m* g$ V, J3 b. z9 I if (inbuf == marker[m]) ( s ~3 |0 Q( [/ j: E6 b { ' K/ S- B7 n( Z% q/ G8 T" \5 O i++; , q# s7 t. e. m1 u m++; } else { if (m) { k = 0; + _7 E3 I4 R+ j8 b state = STATE_FLUSHING; - e4 s% L" S, \) i5 d, T } else 8 C' o- l" ] E" g/ z& H! g outbuf[j++] = inbuf[i++];

} ! L1 o8 j; X: k$ U if (m == ml) 2 T7 W( w9 n- f' p state = STATE_INIT_READLEN; 7 ]7 \9 j4 v* A+ Q break;

case STATE_FLUSHING: * c) G0 V$ ?) b8 N! K outbuf[j++] = marker[k++]; m--; # i5 m0 A! s/ R2 ` if (m==0) state = STATE_COPY_INPUT; 6 ^5 z& Z8 S, E" U9 [ break; * ?" V2 u- ^3 |' l6 X6 X case STATE_SKIP_ML: " m' [! N \3 e+ W T) t2 M i++; if (!(--ml)) ! ?0 v0 U8 v: v2 k state = nextstate; : y8 I8 @6 P* c* ]2 G, _+ X break;

case STATE_INIT_READLEN: 9 v3 _/ g, [( C T: W4 l E/ K ml = 6; & C) `) N4 [8 {7 |: `" \ state = STATE_READLEN; , }* L6 I$ j w break;

case STATE_READLEN: / n t, ^6 M; L+ l$ K6 d5 a% B1 X# I) a- @ lenbuf[6-ml] = inbuf[i++]; 8 D5 ^9 ]/ K; L$ ~6 h if (!(--ml)) * p& u. b1 e3 l) T5 w8 R { : m4 [9 s/ T6 a0 A; p len = decodeBase64 (lenbuf); ! k( \- @8 h3 t. P( x m = 0; % r9 E r ]# m) i; @- e ml = 2; state = STATE_SKIP_ML; ; r+ I: [2 B# @0 r, f9 \1 ^ nextstate = STATE_DECODE; } break;

case STATE_DECODE: if (!len) { ! Z3 n% u. I, E ml = 6; % `, u' p R7 P% h, u+ ^ state = STATE_CHECKSUM; R4 c4 i, h% g: p: ^% ? break; 9 P8 C$ ~8 C; b- I6 M } ) S) i1 e& S3 D8 S3 g2 B* ^ b if (inbuf == _blank>'@') - ^4 Q0 ~5 _7 f* K+ [1 x state = STATE_UNESCAPE; else { 8 M0 _! P; d: @# C V2 t# V7 T if (inbuf < 0x80) { - F# q4 @; A N outbuf[j++] = c = transformed[pick_encoding[m%64]][inbuf]; * @( S) S) d5 C& g: }3 {- x csum += c; 2 e: f2 j* A& {7 I( n m++; , o; n/ Z0 l$ `/ V1 z } else { outbuf[j++] = inbuf; & n7 J, ~8 B1 h. L7 m+ F' B if ((cp) && (isLeadByte (cp,inbuf))) state = STATE_DBCS; }

} , R& k) |: l: v; t i++; 8 e. i# h# U" P, B$ f e8 z- p9 H len--; ! t: x+ L" U, y) |& z8 U break;

case STATE_DBCS: outbuf[j++] = inbuf[i++]; state = STATE_DECODE; break; c0 V, r; M. t2 M/ Y1 u# q case STATE_UNESCAPE: outbuf[j++] = c = unescape (inbuf[i++]); ; b, f8 h& a d, n csum += c; " h3 m; Q \2 [* ?; h len--; m++; 5 G, t& t7 A( t* X$ P5 G state = STATE_DECODE; break;

case STATE_CHECKSUM: csbuf[6-ml] = inbuf[i++]; if (!(--ml)) r5 M; n9 F% @1 ?+ ` { csum -= decodeBase64 (csbuf); $ l* ]& K# u! J if (csum) { //printf ("Error - Incorrect checksum! (%lu)\n", csum); //csum=0; 此处注释掉好点，不然好多时候不能解密 嘿嘿 [icyfox] } m = 0; , r* t$ j- |2 E' A1 a ml = 6; / x/ S% D5 U _+ C) _2 y0 x state = STATE_SKIP_ML; 1 M; c# {, n: D+ m7 [ nextstate = STATE_INIT_COPY; } 9 l4 ^8 F6 u9 O4 B% f3 Z/ r break;

default: printf ("Invalid state: %d\n", state); break; - Z# s( f1 v J) V/ P/ L* V2 \ } 7 a; [8 @; J: y2 K } fwrite (outbuf, sizeof (char), j, outfile); fclose (infile); fclose (outfile); $ V$ k1 k5 w4 C- H7 R return 0; }

# F4 o+ q6 B, N! V% W3 Q5 |- Wint main (int argc, char **argv) { : L0 B$ o2 q2 G& _. G$ q3 u& } int cp = 0;

if (argc < 3) { 9 W; d, K: v: ]$ t* }$ Z" d5 k printf ("Decoder for Microsoft Script Encoder v1.3\n" ! A* g; g/ a6 m "(c)2000/2001 MrBrownstone, _blank>mrbrownstone@virtualconspiracy.com\n" "Home page: _blank>http://www.virtualconspiracy.com/scrdec.html\n\n" "Usage: scrdec13 [codepage]\n\n" "Code pages can be 932 - Japanese\n" " 936 - Chinese (Simplified)\n" " 950 - Chinese (Traditional)\n" ' i6 U" b. L% f& a* J6 C " 949 - Korean (Wansung)\n" " 1361 - Korean (Johab)\n" 0 `$ n0 H/ H+ s+ C% i5 _: A+ ] "Any other code pages don't need to be specified.\n"); return 10; 3 W* {! m7 |; M3 V }

if (argc > 3) cp = atoi (argv[3]); return ScriptDecoder (argv[1], argv[2], cp); ( h j8 j6 }5 J) `9 t7 i0 }}