网页脚本解密

韩冰

作者：冰狐浪子　　来自：http://www.icyfoxlovelace.com/

9 p6 K8 H2 ` Q! o8 u( C8 j

一网友给我一加密网页“太乙奇門六壬排盤程式”，其中脚本采用微软工具进行了加[VBScript.Encode]，说是用解密软件不能解密，我看后发现页面编码是UTF-8,改为ANSI后，使用scrdec顺利解密，看来编码问题有的时候满有用的，对于解密失败的朋友可以尝试看下编码格式，因为现在的解码工具好像是针对ANSI编码的！

+ R" ]- w$ {6 Z9 F

附scrdec1.3源代码[c代码]：

/**********************************************************************/ , X' _- X5 P( [9 M6 b5 u: w% ?/* scrdec.c - Decoder for Microsoft Script Encoder */ 3 U3 V+ ~' x. ^# e+ l/* Version 1.3 */ /* */ ; ?% N( a2 L+ v6 O' O; o/* COPYRIGHT: */ ( r# W: |6 l8 ^' c% ]) M: l/* (c)2000/2001 MrBrownstone, _blank>mrbrownstone@virtualconspiracy.com */ /* Some changes by Joe Steele to correct minor stuff */ /* */ /* DISCLAIMER: */ 9 d* [( P) {- B3 Q' G4 P/* This program is for demonstrative and educational purposes only. */ /* Use of this program is at your own risk. The author cannot be held */ /* responsible if any laws are broken by use of this program. */ 6 R5 n0 y8 ~3 ?1 N) z# m& |/* */ ) _2 F' z$ E) E+ w6 G' B$ J/* If you use or distribute this code, this message should be held */ /* intact. Also, any program based upon this code should display the */ ) v" L, V, ?! H0 x5 Y/* copyright message and the disclaimer. */ /**********************************************************************/

#include #include #include

#define LEN_OUTBUF 64 #define LEN_INBUF 1024

2 H8 T& a' K* W* n. a

#define STATE_INIT_COPY 100 #define STATE_COPY_INPUT 101 & q2 s- V. q. b; n3 o, @; F. U#define STATE_SKIP_ML 102 3 d, y3 d5 b* k* n& s* j; o/ a' t. _- ~, E#define STATE_CHECKSUM 103 #define STATE_READLEN 104 6 t& u" Q6 I. K8 [6 v( I! Q#define STATE_DECODE 105 0 i9 `6 Q0 E) W#define STATE_UNESCAPE 106 , Z+ r0 M7 j1 s2 R5 i& a2 j( J) g#define STATE_FLUSHING 107 5 R: m9 q* C% A#define STATE_DBCS 108 #define STATE_INIT_READLEN 109

unsigned char rawData[292] = { / ~: B- j' J3 d9 W1 M2 e2 G, j" N 0x64,0x37,0x69, 0x50,0x7E,0x2C, 0x22,0x5A,0x65, 0x4A,0x45,0x72, 0x61,0x3A,0x5B, 0x5E,0x79,0x66, 0x5D,0x59,0x75, 0x5B,0x27,0x4C, 7 e1 X8 Z# R0 f 0x42,0x76,0x45, 0x60,0x63,0x76, 0x23,0x62,0x2A, 0x65,0x4D,0x43, 0x5F,0x51,0x33, 0x7E,0x53,0x42, 0x4F,0x52,0x20, 0x52,0x20,0x63, " L9 S6 p% Q8 Q8 O: ]/ p 0x7A,0x26,0x4A, 0x21,0x54,0x5A, 0x46,0x71,0x38, 0x20,0x2B,0x79, 0x26,0x66,0x32, 0x63,0x2A,0x57, 0x2A,0x58,0x6C, 0x76,0x7F,0x2B, - f/ k) Z$ ^! e9 l K 0x47,0x7B,0x46, 0x25,0x30,0x52, 0x2C,0x31,0x4F, 0x29,0x6C,0x3D, 0x69,0x49,0x70, 0x3F,0x3F,0x3F, 0x27,0x78,0x7B, 0x3F,0x3F,0x3F, 0x67,0x5F,0x51, 0x3F,0x3F,0x3F, 0x62,0x29,0x7A, 0x41,0x24,0x7E, ( J& o7 F& _# b# N) W( r$ J' d/ t 0x5A,0x2F,0x3B, 0x66,0x39,0x47, 0x32,0x33,0x41, 0x73,0x6F,0x77, 0x4D,0x21,0x56, 0x43,0x75,0x5F, 0x71,0x28,0x26, 0x39,0x42,0x78, 0x7C,0x46,0x6E, 0x53,0x4A,0x64, 0x48,0x5C,0x74, 0x31,0x48,0x67, 0x72,0x36,0x7D, 0x6E,0x4B,0x68, 0x70,0x7D,0x35, 0x49,0x5D,0x22, ! u, ?5 T% d# r: a+ g) U. B 0x3F,0x6A,0x55, 0x4B,0x50,0x3A, 0x6A,0x69,0x60, 0x2E,0x23,0x6A, 0x7F,0x09,0x71, 0x28,0x70,0x6F, 0x35,0x65,0x49, 0x7D,0x74,0x5C, * b" N& @1 z/ R+ O5 ~# Q 0x24,0x2C,0x5D, 0x2D,0x77,0x27, 0x54,0x44,0x59, 0x37,0x3F,0x25, 2 C) M0 T2 t9 s2 Z$ P4 K) G5 d 0x7B,0x6D,0x7C, 0x3D,0x7C,0x23, 0x6C,0x43,0x6D, 0x34,0x38,0x28, 6 r& b* c n/ Q1 J( F0 s( A. p 0x6D,0x5E,0x31, 0x4E,0x5B,0x39, 0x2B,0x6E,0x7F, 0x30,0x57,0x36, 0x6F,0x4C,0x54, 0x74,0x34,0x34, 0x6B,0x72,0x62, 0x4C,0x25,0x4E, 0x33,0x56,0x30, 0x56,0x73,0x5E, 0x3A,0x68,0x73, 0x78,0x55,0x09, 0x57,0x47,0x4B, 0x77,0x32,0x61, 0x3B,0x35,0x24, 0x44,0x2E,0x4D, 0x2F,0x64,0x6B, 0x59,0x4F,0x44, 0x45,0x3B,0x21, 0x5C,0x2D,0x37, 0x68,0x41,0x53, 0x36,0x61,0x58, 0x58,0x7A,0x48, 0x79,0x22,0x2E, 0x09,0x60,0x50, 0x75,0x6B,0x2D, 0x38,0x4E,0x29, 0x55,0x3D,0x3F, 2 e1 {$ k- `3 U) |2 | 0x51,0x67,0x2f + ]' ^4 T8 v5 Z& `- C9 o} ;

& P" M& E* p% x

const unsigned char pick_encoding[64] = { , A, m. f( m( W/ `) j1, 2, 0, 1, 2, 0, 2, 0, 0, 2, 0, 2, 1, 0, 2, 0, 3 W. \+ z- t* d: B" ^& D9 \1, 0, 2, 0, 1, 1, 2, 0, 0, 2, 1, 0, 2, 0, 0, 2, + ?! y/ L, b) }0 N' p* ?" d1, 1, 0, 2, 0, 2, 0, 1, 0, 1, 1, 2, 0, 1, 0, 2, 2 k2 Q4 X; Y, j' ] g5 O0 V1, 0, 2, 0, 1, 1, 2, 0, 0, 1, 1, 2, 0, 1, 0, 2 };

unsigned char transformed[3][128]; - p: \% _1 a4 K& F' _' _& Nint digits[0x7b];

, M, ]1 M( W0 o: @, K7 D

unsigned char unescape (unsigned char c) " @3 F6 D+ M5 F2 Y# f9 {# v7 a1 h/ B{ : N, N- G9 H. V" W( ?9 H$ N/ K0 c static unsigned char escapes[] = "#&!*$"; ( k* F; k5 x* f static unsigned char escaped[] = "\r\n<>@"; : O3 F' O+ W" J1 U( Y int i=0;

' {; r. T5 c+ W! _

if (c > 127) return c; while (escapes) { if (escapes == c) # V- A3 E. D+ g6 W A* h7 ^$ v0 T+ k, H return escaped; i++; . m; b ^) \! u$ }/ | }7 Z/ k } & V$ z/ }* d4 u, O, }+ R return '?'; }

void maketrans (void) ; M( e1 @ U8 P{ " W/ R1 v4 A& A5 G: U2 O1 O int i, j;

for (i=31; i<=127; i++) for (j=0; j<3; j++) ! S& \9 B* Y- P' |7 \- ]3 y5 S0 n' P transformed[j][rawData[(i-31)*3 + j]] = (i==31) ? 9 : i; 4 q. _" A% A3 Z) L- p5 ^}

韩冰

void makedigits (void) + S7 n$ V) Q1 f; @2 g' O1 u1 `{ int i;

for (i=0; i<26; i++) { # o/ F$ b6 E' s/ C- ? digits['A'+i] = i; digits['a'+i] = i+26; 2 q) @" G0 h4 u( Q! k } 2 n- Z0 p' P2 Y+ |, z for (i=0; i<10; i++) digits['0'+i] = i+52; digits[0x2b] = 62; digits[0x2f] = 63; }

unsigned long int decodeBase64 (unsigned char *p) { unsigned long int val = 0;

val += (digits[p[0]] << 2); 8 ^! m0 h5 a7 O$ I( N% H val += (digits[p[1]] >> 4); val += (digits[p[1]] & 0xf) << 12; val += ((digits[p[2]] >> 2) << 8); val += ((digits[p[2]] & 0x3) << 22); val += (digits[p[3]] << 16); 5 e8 k( ~4 Z: z9 [ val += ((digits[p[4]] << 2) << 24); 5 s" d: R; H9 H val += ((digits[p[5]] >> 4) << 24);

/* 543210 543210 543210 543210 543210 543210

765432 10 ba98 " p5 R4 I. z [6 \ fedc : z! f5 {9 O0 ?- D+ B, e) r 76 ( `; p, t8 _. {! I* R5 I 543210 0 j( J3 g( W0 i: V5 u9 W fedcba 98---- |- LSB -||- -||- -| |- MSB -| ! D y' Q1 Y( g' a4 K( a */ return val; }

int isLeadByte (unsigned int cp, unsigned char ucByte) { 7 R) R$ Y: I" {3 ^ /* Code page 932 - Japanese Shift-JIS - 0x81-0x9f 0xe0-0xfc 936 - Simplified Chinese GBK - 0xa1-0xfe 949 - Korean Wansung - 0x81-0xfe 950 - Traditional Chinese Big5 - 0x81-0xfe , m0 ?* k9 o8 e" B3 O 1361 - Korean Johab - 0x84-0xd3 , F7 f, M7 P" i& x; J8 B- T, n6 A" x 0xd9-0xde , B6 e: @: C( }8 r/ h8 ^ 0xe0-0xf9 */ switch (cp) : e7 R7 A, T2 T, y { 1 Z/ W2 o0 Z5 p! }; s: V# D case 932: ; Z) t* ?7 R, B, k. g4 j* _ if ((ucByte > 0x80) && (ucByte < 0xa0)) return 1; if ((ucByte > 0xdf) && (ucByte < 0xfd)) return 1; else return 0; 8 W! t k4 Y: \1 g9 s' F( I case 936: , V6 G5 ^ l9 a0 T; | if ((ucByte > 0xa0) && (ucByte < 0xff)) return 1; ) ?% H0 q: I; q+ l9 Z else return 0; , T9 y! K5 A7 f7 C) T3 b case 949: case 950: if ((ucByte > 0x80) && (ucByte < 0xff)) return 1; else return 0; ! C7 g" \. l9 [$ L+ L case 1361: if ((ucByte > 0x83) && (ucByte < 0xd4)) return 1; ! G; R. i2 H3 X1 {9 d if ((ucByte > 0xd8) && (ucByte < 0xdf)) return 1; if ((ucByte > 0xdf) && (ucByte < 0xfa)) return 1; else return 0; 3 a$ f% O# B, q; u% F default: return 0; ! N& `$ w& t1 k2 U/ F' h }

}

o. f* }. s8 w( }int ScriptDecoder (unsigned char *inname, unsigned char *outname, unsigned int cp) { unsigned char inbuf[LEN_INBUF+1]; - s# }4 ]8 z* H! U3 H0 i unsigned char outbuf[LEN_OUTBUF+1]; % u1 d$ a9 T* H/ m+ s unsigned char c, lenbuf[7], csbuf[7]; unsigned char marker[] = "#@~^"; int nextstate, state = 0; ! s' m5 R [( I2 N" { int i, j, k, m, ml = 0; unsigned long int csum = 0, len = 0; FILE *infile, *outfile;

infile = fopen (inname, "rb"); - w5 c0 m; ?+ h; I7 x5 v outfile = fopen (outname, "wb"); 7 F7 X' h7 d" q3 | if (!infile || !outfile) { 4 \5 i6 }* p# e6 ^ printf ("Error opening file!\n"); # t! J: h; v& K* G5 M return 10; } maketrans(); makedigits(); memset (inbuf, 0, sizeof (inbuf)); % v6 W9 P$ }5 r* @& L& F8 b& x) U memset (outbuf, 0, sizeof (outbuf)); memset (lenbuf, 0, sizeof (lenbuf)); ; v% t/ L; Z; ~- O e state = STATE_INIT_COPY; 0 p( G" Y/ |+ H, B7 |9 v' Z1 \4 W i = 0; j = 0;

while (state) $ Y I% f$ l- J; Y) Z* g& r { if (inbuf == 0) & ]$ {" Y0 a4 d! R, D, q! U* O { 9 a1 u4 B$ X' g3 X& H' {5 }% k if (feof (infile)) & g( G9 ]# w3 |3 U3 q6 E break;

memset (inbuf, 0, sizeof (inbuf)); ( u& @; `' @% C) W fgets (inbuf, LEN_INBUF, infile); i = 0; 4 J% { H4 R' ]6 [* w/ u0 g continue; # n# g7 ^$ Q# x% ]& l' T }

if (j == LEN_OUTBUF) ! X* C; ^4 {+ i4 l( W9 ?/ X/ b2 p8 y { & z; `8 q- ~! j7 e. _9 V& g fwrite (outbuf, sizeof(char), j, outfile); : n5 l: y) V; j V j = 0; }

switch (state) 9 w0 i, Z( [& y) z( U6 U { * p0 ?/ g- E! J1 g1 f case STATE_INIT_COPY: + m' o0 R# t9 p ml = strlen (marker); m = 0; state = STATE_COPY_INPUT; + ^& a; e) C" @, q/ ?% {, t9 \/ ? break;

韩冰

case STATE_COPY_INPUT: ' S7 e. f0 d* U8 s if (inbuf == marker[m]) { 2 W2 Z- T% x V b, O* [ i++; m++; } 4 |7 L. L; Y0 `% s else { 0 T) N' V/ \$ f& v. K0 C2 J8 d if (m) { k = 0; : w6 W0 [; O- p# ?" C$ i) @ state = STATE_FLUSHING; 8 A8 D/ @: {! f6 Z1 a" K8 i" ` } 8 h2 A3 t" A! l+ V( e, S$ I- B2 F+ Z else ' G* v4 @# N |4 t& F' t outbuf[j++] = inbuf[i++];

} 4 v: h8 `. D) z5 m: ^" p! O2 x if (m == ml) ' e/ ~; @2 [ K+ I/ | state = STATE_INIT_READLEN; " }! b- k& s* s# a break;

case STATE_FLUSHING: outbuf[j++] = marker[k++]; $ E U; x; l. ^ m--; if (m==0) / L& l- Z9 c; L' J- U! U0 e state = STATE_COPY_INPUT; 6 ]& _" ?* F* |+ n& N; z7 F% E1 ^ break; 5 y+ B: B7 D- a% v f2 G$ } & V: } y; s4 B. W: x9 x d$ x; p case STATE_SKIP_ML: i++; % ]/ W0 a' V6 \2 P" r/ z- e. k if (!(--ml)) state = nextstate; & N9 n$ N: R* s$ t& y' Q; `- Z* p break;

case STATE_INIT_READLEN: ml = 6; . ?7 h/ {# r# Q5 T state = STATE_READLEN; break;

case STATE_READLEN: lenbuf[6-ml] = inbuf[i++]; + r6 `2 ^* n* m if (!(--ml)) { $ k% h! W Q b4 l( F; R% W) q len = decodeBase64 (lenbuf); m = 0; ml = 2; state = STATE_SKIP_ML; 8 k9 E- i- q! M nextstate = STATE_DECODE; } 2 {9 z2 K6 e. L; _% P break;

case STATE_DECODE: if (!len) { ml = 6; state = STATE_CHECKSUM; break; / l4 ?+ i: u. F# L& l1 i; l6 V } - e5 g f; r: w$ ^' i4 _8 k if (inbuf == _blank>'@') & l: v' E; s: P2 l; ~+ ]- d# a state = STATE_UNESCAPE; else l% F/ c( L* `2 [5 N' [% { { $ r3 W2 y& r' k1 { if (inbuf < 0x80) ; l0 z3 h9 E. I2 l { outbuf[j++] = c = transformed[pick_encoding[m%64]][inbuf]; 7 T0 m( w6 S' V/ j1 j' n, j csum += c; m++; } else ! J9 m1 C) W8 a/ o0 x+ t2 i( H1 } { # f- D0 k( N# E, b% }& @( D outbuf[j++] = inbuf; 1 }2 R( ~9 o7 N* K$ e if ((cp) && (isLeadByte (cp,inbuf))) state = STATE_DBCS; }

} i++; - p3 h, j! G1 l# t" O len--; break;

case STATE_DBCS: outbuf[j++] = inbuf[i++]; - G: w6 H( j7 K8 ]: w: e state = STATE_DECODE; break; case STATE_UNESCAPE: outbuf[j++] = c = unescape (inbuf[i++]); / \& r9 U/ ^+ |; G csum += c; 4 y6 k% G* F( [2 v len--; m++; ) \0 ?1 ~' d' H) _8 N" i6 c state = STATE_DECODE; & e2 Q9 ~9 o9 v T2 T break;

case STATE_CHECKSUM: csbuf[6-ml] = inbuf[i++]; & _1 d# g. P3 l& W) r6 P if (!(--ml)) { 2 t- C- k, L" v! ^2 D csum -= decodeBase64 (csbuf); 8 [/ q* B5 ^1 w! A if (csum) , @$ [# \/ K( ?& ?5 a0 v { 0 }* u3 S Z9 J1 G) ^, E //printf ("Error - Incorrect checksum! (%lu)\n", csum); //csum=0; 此处注释掉好点，不然好多时候不能解密 嘿嘿 [icyfox] } U% B# T, l& D b: E5 W m = 0; & t4 n% F( J+ w ml = 6; state = STATE_SKIP_ML; nextstate = STATE_INIT_COPY; % f6 y2 s) Z, N/ E1 Y; \+ y1 N, [ } ' I: V5 M4 q% _ break;

default: # a+ _2 m1 K; ?4 Q* h" Q printf ("Invalid state: %d\n", state); break; ' h# f7 Q! w$ C) n. [2 A } } 4 P9 y8 Y$ |( L; D / \$ F, K- X: `# { fwrite (outbuf, sizeof (char), j, outfile); , f4 h3 n9 V! C h4 C: `; H8 a fclose (infile); : `- H1 {( O7 \% s2 X fclose (outfile); return 0; }

; _! u- ?# r4 }6 lint main (int argc, char **argv) { int cp = 0;

if (argc < 3) " `+ v+ }6 |/ F/ y. V0 y% a. y { ) I5 x2 E9 s; n+ l) N$ O& J printf ("Decoder for Microsoft Script Encoder v1.3\n" "(c)2000/2001 MrBrownstone, _blank>mrbrownstone@virtualconspiracy.com\n" "Home page: _blank>http://www.virtualconspiracy.com/scrdec.html\n\n" . c2 J8 v# d/ K, H; ] "Usage: scrdec13 [codepage]\n\n" "Code pages can be 932 - Japanese\n" ; M+ n n6 ^5 a# s x " 936 - Chinese (Simplified)\n" " 950 - Chinese (Traditional)\n" " 949 - Korean (Wansung)\n" 9 s8 u/ T4 X" O. o3 d7 N " 1361 - Korean (Johab)\n" "Any other code pages don't need to be specified.\n"); return 10; }

if (argc > 3) cp = atoi (argv[3]); ! i/ }8 V) k' j. w0 }9 p return ScriptDecoder (argv[1], argv[2], cp); }