发新话题
打印

[转载]网页脚本解密

[转载]网页脚本解密

文章作者:冰狐浪子

一网友给我一加密网页“太乙奇門六壬排盤程式”,其中脚本采用微软工具进行了加[VBScript.Encode],说是用解密软件不能解密,我看后发现页面编码是UTF-8,改为ANSI后,使用scrdec顺利解密,看来编码问题有的时候满有用的,对于解密失败的朋友可以尝试看下编码格式,因为现在的解码工具好像是针对ANSI编码的!

附scrdec1.3源代码[c代码]:
复制内容到剪贴板
代码:
/**********************************************************************/
/* scrdec.c - Decoder for Microsoft Script Encoder              */
/* Version 1.3                                      */
/*                                              */
/* COPYRIGHT:                                      */
/* (c)2000/2001 MrBrownstone, _blank>[email]mrbrownstone@virtualconspiracy.com[/email]    */
/* Some changes by Joe Steele to correct minor stuff            */
/*                                              */
/* DISCLAIMER:                                      */
/* This program is for demonstrative and educational purposes only.  */
/* Use of this program is at your own risk. The author cannot be held */
/* responsible if any laws are broken by use of this program.      */
/*                                              */
/* If you use or distribute this code, this message should be held   */
/* intact. Also, any program based upon this code should display the  */
/* copyright message and the disclaimer.                    */
/**********************************************************************/

#include
#include
#include

#define LEN_OUTBUF 64
#define LEN_INBUF 1024

#define STATE_INIT_COPY  100
#define STATE_COPY_INPUT 101
#define STATE_SKIP_ML  102
#define STATE_CHECKSUM  103
#define STATE_READLEN  104
#define STATE_DECODE  105
#define STATE_UNESCAPE  106
#define STATE_FLUSHING  107
#define STATE_DBCS  108
#define STATE_INIT_READLEN 109

unsigned char rawData[292] = {
      0x64,0x37,0x69, 0x50,0x7E,0x2C, 0x22,0x5A,0x65, 0x4A,0x45,0x72,
      0x61,0x3A,0x5B, 0x5E,0x79,0x66, 0x5D,0x59,0x75, 0x5B,0x27,0x4C,
      0x42,0x76,0x45, 0x60,0x63,0x76, 0x23,0x62,0x2A, 0x65,0x4D,0x43,
      0x5F,0x51,0x33, 0x7E,0x53,0x42, 0x4F,0x52,0x20, 0x52,0x20,0x63,
      0x7A,0x26,0x4A, 0x21,0x54,0x5A, 0x46,0x71,0x38, 0x20,0x2B,0x79,
      0x26,0x66,0x32, 0x63,0x2A,0x57, 0x2A,0x58,0x6C, 0x76,0x7F,0x2B,
      0x47,0x7B,0x46, 0x25,0x30,0x52, 0x2C,0x31,0x4F, 0x29,0x6C,0x3D,
      0x69,0x49,0x70, 0x3F,0x3F,0x3F, 0x27,0x78,0x7B, 0x3F,0x3F,0x3F,
      0x67,0x5F,0x51, 0x3F,0x3F,0x3F, 0x62,0x29,0x7A, 0x41,0x24,0x7E,
      0x5A,0x2F,0x3B, 0x66,0x39,0x47, 0x32,0x33,0x41, 0x73,0x6F,0x77,
      0x4D,0x21,0x56, 0x43,0x75,0x5F, 0x71,0x28,0x26, 0x39,0x42,0x78,
      0x7C,0x46,0x6E, 0x53,0x4A,0x64, 0x48,0x5C,0x74, 0x31,0x48,0x67,
      0x72,0x36,0x7D, 0x6E,0x4B,0x68, 0x70,0x7D,0x35, 0x49,0x5D,0x22,
      0x3F,0x6A,0x55, 0x4B,0x50,0x3A, 0x6A,0x69,0x60, 0x2E,0x23,0x6A,
      0x7F,0x09,0x71, 0x28,0x70,0x6F, 0x35,0x65,0x49, 0x7D,0x74,0x5C,
      0x24,0x2C,0x5D, 0x2D,0x77,0x27, 0x54,0x44,0x59, 0x37,0x3F,0x25,
      0x7B,0x6D,0x7C, 0x3D,0x7C,0x23, 0x6C,0x43,0x6D, 0x34,0x38,0x28,
      0x6D,0x5E,0x31, 0x4E,0x5B,0x39, 0x2B,0x6E,0x7F, 0x30,0x57,0x36,
      0x6F,0x4C,0x54, 0x74,0x34,0x34, 0x6B,0x72,0x62, 0x4C,0x25,0x4E,
      0x33,0x56,0x30, 0x56,0x73,0x5E, 0x3A,0x68,0x73, 0x78,0x55,0x09,
      0x57,0x47,0x4B, 0x77,0x32,0x61, 0x3B,0x35,0x24, 0x44,0x2E,0x4D,
      0x2F,0x64,0x6B, 0x59,0x4F,0x44, 0x45,0x3B,0x21, 0x5C,0x2D,0x37,
      0x68,0x41,0x53, 0x36,0x61,0x58, 0x58,0x7A,0x48, 0x79,0x22,0x2E,
      0x09,0x60,0x50, 0x75,0x6B,0x2D, 0x38,0x4E,0x29, 0x55,0x3D,0x3F,
      0x51,0x67,0x2f
} ;

const unsigned char pick_encoding[64] = {
1, 2, 0, 1, 2, 0, 2, 0, 0, 2, 0, 2, 1, 0, 2, 0,
1, 0, 2, 0, 1, 1, 2, 0, 0, 2, 1, 0, 2, 0, 0, 2,
1, 1, 0, 2, 0, 2, 0, 1, 0, 1, 1, 2, 0, 1, 0, 2,
1, 0, 2, 0, 1, 1, 2, 0, 0, 1, 1, 2, 0, 1, 0, 2
};

unsigned char transformed[3][128];
int digits[0x7b];

unsigned char unescape (unsigned char c)
{
static unsigned char escapes[] = "#&!*$";
static unsigned char escaped[] = "\r\n<>@";
int i=0;

if (c > 127)
  return c;
while (escapes[i])
{
  if (escapes[i] == c)
  return escaped[i];
  i++;
  }
return &#39;?&#39;;
}

void maketrans (void)
{
int i, j;

for (i=31; i<=127; i++)
  for (j=0; j<3; j++)
  transformed[j][rawData[(i-31)*3 + j]] = (i==31) ? 9 : i;
}

void makedigits (void)
{
int i;

for (i=0; i<26; i++)
{
  digits[&#39;A&#39;+i] = i;
  digits[&#39;a&#39;+i] = i+26;
  }
for (i=0; i<10; i++)
  digits[&#39;0&#39;+i] = i+52;
digits[0x2b] = 62;
digits[0x2f] = 63;
}

unsigned long int decodeBase64 (unsigned char *p)
{
unsigned long int val = 0;

val +=  (digits[p[0]] << 2);
val +=  (digits[p[1]] >> 4);
val +=  (digits[p[1]] & 0xf) << 12;
val += ((digits[p[2]] >> 2) << 8);
val += ((digits[p[2]] & 0x3) << 22);
val +=  (digits[p[3]] << 16);
val += ((digits[p[4]] << 2) << 24);
val += ((digits[p[5]] >> 4) << 24);

/* 543210 543210 543210 543210 543210 543210

   765432
        10
            ba98
         fedc
               76
                 543210
                        fedcba 98----
     |- LSB -||-    -||-    -| |- MSB -|
*/
return val;
}

int isLeadByte (unsigned int cp, unsigned char ucByte)
{
/* Code page 932 - Japanese Shift-JIS     - 0x81-0x9f
                                0xe0-0xfc
           936 - Simplified Chinese GBK  - 0xa1-0xfe
           949 - Korean Wansung        - 0x81-0xfe
           950 - Traditional Chinese Big5 - 0x81-0xfe
          1361 - Korean Johab         - 0x84-0xd3
                                 0xd9-0xde
                                 0xe0-0xf9 */
switch (cp)
{
  case 932:
  if ((ucByte > 0x80) && (ucByte < 0xa0)) return 1;
  if ((ucByte > 0xdf) && (ucByte < 0xfd)) return 1;
  else return 0;
  case 936:
  if ((ucByte > 0xa0) && (ucByte < 0xff)) return 1;
  else return 0;
  case 949:
  case 950:
  if ((ucByte > 0x80) && (ucByte < 0xff)) return 1;
  else return 0;
  case 1361:
  if ((ucByte > 0x83) && (ucByte < 0xd4)) return 1;
  if ((ucByte > 0xd8) && (ucByte < 0xdf)) return 1;
  if ((ucByte > 0xdf) && (ucByte < 0xfa)) return 1;
  else return 0;
  default:
  return 0;
  }

}


int ScriptDecoder (unsigned char *inname, unsigned char *outname, unsigned int cp)
{
unsigned char inbuf[LEN_INBUF+1];
unsigned char outbuf[LEN_OUTBUF+1];
unsigned char c, lenbuf[7], csbuf[7];
unsigned char marker[] = "#@~^";
int nextstate, state = 0;
int i, j, k, m, ml = 0;
unsigned long int csum = 0, len = 0;
FILE *infile, *outfile;

infile = fopen (inname, "rb");
outfile = fopen (outname, "wb");
if (!infile || !outfile)
{
  printf ("Error opening file!\n");
  return 10;
  }

maketrans();
makedigits();
memset (inbuf, 0, sizeof (inbuf));
memset (outbuf, 0, sizeof (outbuf));
memset (lenbuf, 0, sizeof (lenbuf));

state = STATE_INIT_COPY;
i = 0;
j = 0;

while (state)
{
  if (inbuf[i] == 0)
  {
  if (feof (infile))
   break;

  memset (inbuf, 0, sizeof (inbuf));
  fgets (inbuf, LEN_INBUF, infile);
  i = 0;
  continue;
  }

  if (j == LEN_OUTBUF)
  {
  fwrite (outbuf, sizeof(char), j, outfile);
  j = 0;
  }

  switch (state)
  {
  case STATE_INIT_COPY:
   ml = strlen (marker);
   m = 0;
   state = STATE_COPY_INPUT;
   break;

  case STATE_COPY_INPUT:
   if (inbuf[i] == marker[m])
   {
    i++;
    m++;
    }
   else
   {
    if (m)
    {
    k = 0;
    state = STATE_FLUSHING;
    }
    else
    outbuf[j++] = inbuf[i++];

    }
   if (m == ml)
    state = STATE_INIT_READLEN;
   break;

  case STATE_FLUSHING:
   outbuf[j++] = marker[k++];
   m--;
   if (m==0)
    state = STATE_COPY_INPUT;
   break;
  
  case STATE_SKIP_ML:
   i++;
   if (!(--ml))
    state = nextstate;
   break;


  case STATE_INIT_READLEN:
   ml = 6;
   state = STATE_READLEN;
   break;

  case STATE_READLEN:
   lenbuf[6-ml] = inbuf[i++];
   if (!(--ml))
   {
    len = decodeBase64 (lenbuf);
    m = 0;
    ml = 2;
    state = STATE_SKIP_ML;
    nextstate = STATE_DECODE;
    }
   break;

  case STATE_DECODE:
   if (!len)
   {
    ml = 6;
    state = STATE_CHECKSUM;
    break;
    }
   if (inbuf[i] == _blank>&#39;@&#39;)
    state = STATE_UNESCAPE;
   else
   {
    if (inbuf[i] < 0x80)
    {
    outbuf[j++] = c = transformed[pick_encoding[m%64]][inbuf[i]];
    csum += c;
    m++;
    }
    else
    {
    outbuf[j++] = inbuf[i];
    if ((cp) && (isLeadByte (cp,inbuf[i])))
     state = STATE_DBCS;
    }

    }
   i++;
   len--;
   break;

  case STATE_DBCS:
   outbuf[j++] = inbuf[i++];
   state = STATE_DECODE;
   break;
   
  case STATE_UNESCAPE:
   outbuf[j++] = c = unescape (inbuf[i++]);
   csum += c;
   len--;
   m++;
   state = STATE_DECODE;
   break;

  case STATE_CHECKSUM:
   csbuf[6-ml] = inbuf[i++];
   if (!(--ml))
   {
    csum -= decodeBase64 (csbuf);
    if (csum)
    {
    //printf ("Error - Incorrect checksum! (%lu)\n", csum);
    //csum=0; 此处注释掉好点,不然好多时候不能解密 嘿嘿 [icyfox]
    }
    m = 0;
    ml = 6;
    state = STATE_SKIP_ML;
    nextstate = STATE_INIT_COPY;
    }
   break;

  default:
   printf ("Invalid state: %d\n", state);
   break;
  }
  }

fwrite (outbuf, sizeof (char), j, outfile);
fclose (infile);
fclose (outfile);
return 0;
}


int main (int argc, char **argv)
{
int cp = 0;

if (argc < 3)
{
  printf ("Decoder for Microsoft Script Encoder v1.3\n"
  "(c)2000/2001 MrBrownstone, _blank>[email]mrbrownstone@virtualconspiracy.com[/email]\n"
  "Home page: _blank>[url]http://www.virtualconspiracy.com/scrdec.html[/url]\n\n"
  "Usage: scrdec13 [codepage]\n\n"
  "Code pages can be 932 - Japanese\n"
  "            936 - Chinese (Simplified)\n"
  "            950 - Chinese (Traditional)\n"
  "            949 - Korean (Wansung)\n"
  "            1361 - Korean (Johab)\n"
  "Any other code pages don&#39;t need to be specified.\n");
  return 10;
  }

if (argc > 3)
  cp = atoi (argv[3]);
return ScriptDecoder (argv[1], argv[2], cp);
}
qq310926是我唯一用号,除此之外有其他号码号自称邪八冰血封情,则非本人。

TOP

#include
#include
#include
引用了什么库文件??
漏了?。。。
QQ:838468959

TOP

发新话题