网页脚本解密

韩冰

作者：冰狐浪子　　来自：http://www.icyfoxlovelace.com/

一网友给我一加密网页“太乙奇門六壬排盤程式”，其中脚本采用微软工具进行了加[VBScript.Encode]，说是用解密软件不能解密，我看后发现页面编码是UTF-8,改为ANSI后，使用scrdec顺利解密，看来编码问题有的时候满有用的，对于解密失败的朋友可以尝试看下编码格式，因为现在的解码工具好像是针对ANSI编码的！

附scrdec1.3源代码[c代码]：

+ h2 J! [# q% l4 b- }6 m, a

/**********************************************************************/ /* scrdec.c - Decoder for Microsoft Script Encoder */ . W/ y7 h& S! x4 F3 m7 e) H/* Version 1.3 */ /* */ /* COPYRIGHT: */ /* (c)2000/2001 MrBrownstone, _blank>mrbrownstone@virtualconspiracy.com */ /* Some changes by Joe Steele to correct minor stuff */ /* */ /* DISCLAIMER: */ /* This program is for demonstrative and educational purposes only. */ 8 S: a. v) e' ^0 W* p) o/* Use of this program is at your own risk. The author cannot be held */ /* responsible if any laws are broken by use of this program. */ /* */ " S+ p; K* A. ^) R( U9 ]( Y/* If you use or distribute this code, this message should be held */ /* intact. Also, any program based upon this code should display the */ /* copyright message and the disclaimer. */ /**********************************************************************/

#include 1 R5 q( j/ [5 A8 P* I#include #include

& F0 ^8 a* R) g: U; S

#define LEN_OUTBUF 64 ) W. E1 E( n7 g, j% J. _" g, \#define LEN_INBUF 1024

#define STATE_INIT_COPY 100 5 S% D" `; q* e7 `$ Z" v* P* O#define STATE_COPY_INPUT 101 #define STATE_SKIP_ML 102 * p/ V8 g7 V* ~4 l#define STATE_CHECKSUM 103 % ~: \. s0 G* I7 {. m% M#define STATE_READLEN 104 , V" `/ ?& L4 c/ ^$ j N5 g; m1 g: j#define STATE_DECODE 105 #define STATE_UNESCAPE 106 ) ^2 R5 \$ p" E C. f#define STATE_FLUSHING 107 #define STATE_DBCS 108 #define STATE_INIT_READLEN 109

unsigned char rawData[292] = { * x3 x- \: A0 R7 `' G& F 0x64,0x37,0x69, 0x50,0x7E,0x2C, 0x22,0x5A,0x65, 0x4A,0x45,0x72, + I. f6 x N. w: m* U$ U) H 0x61,0x3A,0x5B, 0x5E,0x79,0x66, 0x5D,0x59,0x75, 0x5B,0x27,0x4C, 0x42,0x76,0x45, 0x60,0x63,0x76, 0x23,0x62,0x2A, 0x65,0x4D,0x43, ' r% x& b: z4 {' ?# I 0x5F,0x51,0x33, 0x7E,0x53,0x42, 0x4F,0x52,0x20, 0x52,0x20,0x63, 0x7A,0x26,0x4A, 0x21,0x54,0x5A, 0x46,0x71,0x38, 0x20,0x2B,0x79, 0x26,0x66,0x32, 0x63,0x2A,0x57, 0x2A,0x58,0x6C, 0x76,0x7F,0x2B, 4 O, l% A+ I. ~- S 0x47,0x7B,0x46, 0x25,0x30,0x52, 0x2C,0x31,0x4F, 0x29,0x6C,0x3D, 0x69,0x49,0x70, 0x3F,0x3F,0x3F, 0x27,0x78,0x7B, 0x3F,0x3F,0x3F, ) C8 v' b" g5 o% S, l 0x67,0x5F,0x51, 0x3F,0x3F,0x3F, 0x62,0x29,0x7A, 0x41,0x24,0x7E, 0x5A,0x2F,0x3B, 0x66,0x39,0x47, 0x32,0x33,0x41, 0x73,0x6F,0x77, 3 u5 p8 e% U3 w5 D! I 0x4D,0x21,0x56, 0x43,0x75,0x5F, 0x71,0x28,0x26, 0x39,0x42,0x78, 7 G1 {$ `$ A+ n0 g, T @! P8 b 0x7C,0x46,0x6E, 0x53,0x4A,0x64, 0x48,0x5C,0x74, 0x31,0x48,0x67, 0x72,0x36,0x7D, 0x6E,0x4B,0x68, 0x70,0x7D,0x35, 0x49,0x5D,0x22, ; N0 ~1 I- N- t8 Z9 } 0x3F,0x6A,0x55, 0x4B,0x50,0x3A, 0x6A,0x69,0x60, 0x2E,0x23,0x6A, 0x7F,0x09,0x71, 0x28,0x70,0x6F, 0x35,0x65,0x49, 0x7D,0x74,0x5C, 0x24,0x2C,0x5D, 0x2D,0x77,0x27, 0x54,0x44,0x59, 0x37,0x3F,0x25, 0x7B,0x6D,0x7C, 0x3D,0x7C,0x23, 0x6C,0x43,0x6D, 0x34,0x38,0x28, 0x6D,0x5E,0x31, 0x4E,0x5B,0x39, 0x2B,0x6E,0x7F, 0x30,0x57,0x36, : u6 |( T+ F( u3 I" L 0x6F,0x4C,0x54, 0x74,0x34,0x34, 0x6B,0x72,0x62, 0x4C,0x25,0x4E, 0x33,0x56,0x30, 0x56,0x73,0x5E, 0x3A,0x68,0x73, 0x78,0x55,0x09, 0x57,0x47,0x4B, 0x77,0x32,0x61, 0x3B,0x35,0x24, 0x44,0x2E,0x4D, 3 w4 y- S$ @' p 0x2F,0x64,0x6B, 0x59,0x4F,0x44, 0x45,0x3B,0x21, 0x5C,0x2D,0x37, 6 v) C. a" p4 H& j/ k8 l% }0 p% i 0x68,0x41,0x53, 0x36,0x61,0x58, 0x58,0x7A,0x48, 0x79,0x22,0x2E, 6 s, m5 T/ P1 H; o" H 0x09,0x60,0x50, 0x75,0x6B,0x2D, 0x38,0x4E,0x29, 0x55,0x3D,0x3F, 8 Z% n. W: z" W$ E: r1 f6 P' Q 0x51,0x67,0x2f ! @$ b: @) _" F G} ;

const unsigned char pick_encoding[64] = { 1, 2, 0, 1, 2, 0, 2, 0, 0, 2, 0, 2, 1, 0, 2, 0, 8 d' M. E( p- o6 C1, 0, 2, 0, 1, 1, 2, 0, 0, 2, 1, 0, 2, 0, 0, 2, % n: N; c- P! W( N8 S: J1, 1, 0, 2, 0, 2, 0, 1, 0, 1, 1, 2, 0, 1, 0, 2, 4 V- x' |8 Z* \+ |1, 0, 2, 0, 1, 1, 2, 0, 0, 1, 1, 2, 0, 1, 0, 2 };

; S' R. _5 x, y% S; W9 {

unsigned char transformed[3][128]; / u9 j0 H) w7 o' Zint digits[0x7b];

B9 s2 `# r3 X1 y& t5 B# o$ l

unsigned char unescape (unsigned char c) 2 o& c5 H7 n" [& Y5 p5 T% @( D) O/ O{ static unsigned char escapes[] = "#&!*$"; 7 S$ P) r, Y% R& [% X" a; W static unsigned char escaped[] = "\r\n<>@"; int i=0;

1 t! F" R {. G( M0 E5 U

if (c > 127) # \8 n2 A, L7 i d5 Y' s6 E { return c; 3 ?3 `7 ]" j# D. ^ while (escapes) { if (escapes == c) return escaped; i++; } 8 |1 Y' S8 v! ^ return '?'; }

void maketrans (void) - k6 s% ^9 N) T. W0 q: D2 x) z{ 0 F. B, |' [2 Y2 ^ int i, j;

for (i=31; i<=127; i++) + F2 V, O' |- |, k' H/ M for (j=0; j<3; j++) transformed[j][rawData[(i-31)*3 + j]] = (i==31) ? 9 : i; }

韩冰

void makedigits (void) { # i3 X5 g3 u* [5 D2 _% }% T int i;

for (i=0; i<26; i++) { digits['A'+i] = i; 7 y( q# G6 l" R2 a% @ digits['a'+i] = i+26; ; z. [3 K% u% h; j1 V } / Q& ^8 H8 m! D# T! Z for (i=0; i<10; i++) digits['0'+i] = i+52; digits[0x2b] = 62; % L0 f9 e* D8 ?: D digits[0x2f] = 63; }

unsigned long int decodeBase64 (unsigned char *p) { unsigned long int val = 0;

val += (digits[p[0]] << 2); 5 K4 ?6 Q- {9 e) c0 S* r& B val += (digits[p[1]] >> 4); val += (digits[p[1]] & 0xf) << 12; val += ((digits[p[2]] >> 2) << 8); val += ((digits[p[2]] & 0x3) << 22); val += (digits[p[3]] << 16); val += ((digits[p[4]] << 2) << 24); val += ((digits[p[5]] >> 4) << 24);

/* 543210 543210 543210 543210 543210 543210

765432 4 ]7 b$ b( c: F2 Q; Z' k9 Q 10 ba98 % U8 ~$ q$ Q; E! z fedc 76 543210 fedcba 98---- / B5 I+ \% g- n9 D' X |- LSB -||- -||- -| |- MSB -| */ return val; 9 v/ V, m$ l/ [" b2 Y. ^}

int isLeadByte (unsigned int cp, unsigned char ucByte) 0 o6 P. l, a4 A. U- J, T{ ; V2 ^$ e: J: _ /* Code page 932 - Japanese Shift-JIS - 0x81-0x9f 0xe0-0xfc # h* y1 Y$ e) w5 V* u* D 936 - Simplified Chinese GBK - 0xa1-0xfe 949 - Korean Wansung - 0x81-0xfe 5 Z. P$ _# \ z. T, Y- x& ~( e/ J 950 - Traditional Chinese Big5 - 0x81-0xfe 4 D+ z. X. @( C; J5 Q9 c# b: x3 k 1361 - Korean Johab - 0x84-0xd3 . d4 ~ q) [5 U/ n 0xd9-0xde 0xe0-0xf9 */ switch (cp) { ' n0 ?* U0 m6 U case 932: if ((ucByte > 0x80) && (ucByte < 0xa0)) return 1; & u' l3 y- ~1 }( \ if ((ucByte > 0xdf) && (ucByte < 0xfd)) return 1; 0 R( c$ ^& a- w6 ]- ~ else return 0; case 936: if ((ucByte > 0xa0) && (ucByte < 0xff)) return 1; 4 d4 P% q) I0 @7 C- V5 _" z else return 0; 4 j6 b9 @1 f# F) E ^ case 949: case 950: if ((ucByte > 0x80) && (ucByte < 0xff)) return 1; ' S5 ^ h0 F t y else return 0; case 1361: & p' D% e0 C( W" H0 T6 { if ((ucByte > 0x83) && (ucByte < 0xd4)) return 1; |$ i. m( E3 k% s if ((ucByte > 0xd8) && (ucByte < 0xdf)) return 1; / ]4 k* D: p2 E; { if ((ucByte > 0xdf) && (ucByte < 0xfa)) return 1; 4 n: t t% C" H/ N1 \5 T) u else return 0; default: return 0; }

}

4 ^( J' o: F4 Q0 v5 W2 x$ Gint ScriptDecoder (unsigned char *inname, unsigned char *outname, unsigned int cp) % l3 V$ Y* j4 s{ unsigned char inbuf[LEN_INBUF+1]; unsigned char outbuf[LEN_OUTBUF+1]; % b8 r# W( n3 J; H unsigned char c, lenbuf[7], csbuf[7]; v$ [! P/ j. d unsigned char marker[] = "#@~^"; int nextstate, state = 0; - B ?; ]& f/ f& ~; J& ]% S8 O int i, j, k, m, ml = 0; unsigned long int csum = 0, len = 0; FILE *infile, *outfile;

infile = fopen (inname, "rb"); & _1 K$ v; ]" I. o outfile = fopen (outname, "wb"); 7 Z [: f" n/ J6 g; Y if (!infile || !outfile) ) }' `# o- J& N { printf ("Error opening file!\n"); return 10; ) e$ Z9 B6 o9 a# O+ L, r } 6 @4 k3 @8 V! k 6 ^/ K5 O7 p$ t maketrans(); makedigits(); & p+ i2 M$ ^' L3 T2 o memset (inbuf, 0, sizeof (inbuf)); : G( u" Z7 R, O' J- G memset (outbuf, 0, sizeof (outbuf)); ( Q: j/ V( S4 N# I0 Q) _1 Y memset (lenbuf, 0, sizeof (lenbuf)); state = STATE_INIT_COPY; i = 0; ! q9 A3 w' l# Q9 n6 Z j = 0;

while (state) { if (inbuf == 0) { if (feof (infile)) break;

memset (inbuf, 0, sizeof (inbuf)); ( |" i! a, } Q4 U: W' _1 `$ a$ H fgets (inbuf, LEN_INBUF, infile); ! [, K. v" Y Z8 {+ }/ { i = 0; 7 h1 p& p! P0 N3 x continue; / u9 R2 @8 H7 t" h2 R9 i# |0 ? }

if (j == LEN_OUTBUF) { 6 v0 p5 q! K' E; w' u fwrite (outbuf, sizeof(char), j, outfile); j = 0; }

switch (state) * e8 P4 A. J% N: | { case STATE_INIT_COPY: ml = strlen (marker); m = 0; state = STATE_COPY_INPUT; ) q+ z4 P$ _- c2 w/ K! Z$ c+ v& B break;

韩冰

case STATE_COPY_INPUT: if (inbuf == marker[m]) { i++; ; b. v! I' m& M$ E1 H# I3 x m++; 1 S2 R- p/ S) v7 ^4 t7 z% h } 6 u0 _' ], u& v" H4 q( V else 2 Y6 V/ x8 W2 X2 V; {( l8 N7 F# E' ` { if (m) { 4 o f: \5 L! G6 }8 t6 Z5 ^ k = 0; state = STATE_FLUSHING; ( Z) l/ A( h$ x% K+ x# u } else outbuf[j++] = inbuf[i++];

} if (m == ml) state = STATE_INIT_READLEN; " \5 v& G& x6 o3 h! |0 i( S break;

case STATE_FLUSHING: outbuf[j++] = marker[k++]; m--; if (m==0) state = STATE_COPY_INPUT; break; ( v- y8 S3 z6 ^# I; z9 z& {7 e: g case STATE_SKIP_ML: : |0 q5 z5 H( j) r$ P: O" m3 t i++; # {2 M7 u2 h, U5 V if (!(--ml)) 6 _0 Q4 v6 [: U state = nextstate; break;

case STATE_INIT_READLEN: ml = 6; state = STATE_READLEN; d/ A7 d4 Z7 |5 ]( { break;

case STATE_READLEN: % O% W3 J& ?2 R& M& q lenbuf[6-ml] = inbuf[i++]; if (!(--ml)) 7 O) s4 C" p! j9 _7 r* o { len = decodeBase64 (lenbuf); & S9 s9 d' j5 y m = 0; # Z. C( D- n# b( ^2 V/ [2 {7 ~( L2 Y ml = 2; / l$ q* s1 b5 w" I# u: ` state = STATE_SKIP_ML; ' R5 M- S1 n: C; n- k- d nextstate = STATE_DECODE; } 2 r1 R, |7 y& @2 b1 I& U4 e( L break;

case STATE_DECODE: " c% O7 |8 R7 k7 T( Z if (!len) ! v0 J4 l- A: W& {2 ? { ml = 6; ; b1 N# n: }1 ^+ O8 L) c; s" j0 d state = STATE_CHECKSUM; ) f3 C; J, w3 g- K( |! Y break; , r6 K; d3 v5 o( O) ~ } 7 _6 s/ V/ z- L. N if (inbuf == _blank>'@') state = STATE_UNESCAPE; : ?" S! O; [/ K- q6 y+ E" B else { " @2 R3 j- k' H, u$ o: ~ if (inbuf < 0x80) ; O. z/ e' V, V% b% P& K& N { 1 d4 Y4 g. D+ P( S outbuf[j++] = c = transformed[pick_encoding[m%64]][inbuf]; csum += c; / j- n* J9 M0 \0 K* _. I7 |! k m++; } ' G0 S4 V/ ?( Y, a$ f( J: ` else $ f+ K: D- w8 ]4 K+ i0 g m* n* p { outbuf[j++] = inbuf; 3 y* I/ ?5 h; Z+ } if ((cp) && (isLeadByte (cp,inbuf))) state = STATE_DBCS; }

} 4 ] T0 H$ B6 t i++; len--; 1 `1 Y% _* }. u, W# j' x/ m break;

case STATE_DBCS: outbuf[j++] = inbuf[i++]; state = STATE_DECODE; % s! E$ k$ o; J( x0 z2 X5 c) T: J) k5 x) U break; * D, U5 {* o- B- P0 l3 U1 q case STATE_UNESCAPE: o- ]4 c1 o7 Q# C$ W s/ |$ L outbuf[j++] = c = unescape (inbuf[i++]); csum += c; len--; q0 m! b& Z2 K1 I. E2 b m++; state = STATE_DECODE; break;

case STATE_CHECKSUM: 1 R6 S [4 P* `0 \ csbuf[6-ml] = inbuf[i++]; $ D+ H8 s3 Y. U) M if (!(--ml)) 3 P' b4 C7 ^. k# G { csum -= decodeBase64 (csbuf); if (csum) { //printf ("Error - Incorrect checksum! (%lu)\n", csum); //csum=0; 此处注释掉好点，不然好多时候不能解密 嘿嘿 [icyfox] 9 m8 t6 I6 l* e8 M. j& Z, } } m = 0; ml = 6; state = STATE_SKIP_ML; nextstate = STATE_INIT_COPY; } " s! j% ?: A1 A7 X0 Y& Y* c* C Z break;

default: + p$ d% W0 ?- R# P# ?7 Y$ z5 w printf ("Invalid state: %d\n", state); . V+ o* B3 O* D( j break; : u* u4 f& G7 O9 A" E( W- L } / K% {$ R) @+ i } 2 J! q W- {# ]9 I& g% @$ I fwrite (outbuf, sizeof (char), j, outfile); fclose (infile); fclose (outfile); / ~# i8 Q1 a) U return 0; y4 }- t1 Z) l3 `! J5 @: Y}

int main (int argc, char **argv) : L" b" A4 s$ T" W1 R2 k{ 9 B- R; B7 |) B8 @& t! Y int cp = 0;

if (argc < 3) 0 K: i k9 k; u8 n/ ~; | a$ | { " Y- }5 [9 n. D* o9 @1 ^3 ? printf ("Decoder for Microsoft Script Encoder v1.3\n" 0 C5 A, I' `0 |# E& r0 t3 p "(c)2000/2001 MrBrownstone, _blank>mrbrownstone@virtualconspiracy.com\n" "Home page: _blank>http://www.virtualconspiracy.com/scrdec.html\n\n" 4 H! f9 k0 F5 H3 C$ F "Usage: scrdec13 [codepage]\n\n" " G$ X; t# Y0 N' T/ r# G' c& g$ [2 d0 l& V "Code pages can be 932 - Japanese\n" " 936 - Chinese (Simplified)\n" - x5 @' H9 C3 J! A7 N' @( W " 950 - Chinese (Traditional)\n" " 949 - Korean (Wansung)\n" $ D) e8 }1 _) W( y. H7 i " 1361 - Korean (Johab)\n" "Any other code pages don't need to be specified.\n"); 0 q3 b: V4 L) N, q, ~ return 10; }

if (argc > 3) cp = atoi (argv[3]); : _' W2 ]/ s+ D7 |# F return ScriptDecoder (argv[1], argv[2], cp); 4 B% K9 S6 i2 O. T3 N* p) }! l}