注册
登录
| 关键词： nbsp define STATE unsigned ucByte char 编码 program return 六壬 |
作者：冰狐浪子 来自：http://www.icyfoxlovelace.com/ 一网友给我一加密网页“太乙奇門六壬排盤程式”，其中脚本采用微软工具进行了加[VBScript.Encode]，说是用解密软件不能解密，我看后发现页面编码是UTF-8,改为ANSI后，使用scrdec顺利解密，看来编码问题有的时候满有用的，对于解密失败的朋友可以尝试看下编码格式，因为现在的解码工具好像是针对ANSI编码的！ 附scrdec1.3源代码[c代码]： /**********************************************************************//* scrdec.c - Decoder for Microsoft Script Encoder *//* Version 1.3 *//* *//* COPYRIGHT: *//* (c)2000/2001 MrBrownstone, [email protected] *//* Some changes by Joe Steele to correct minor stuff *//* *//* DISCLAIMER: *//* This program is for demonstrative and educational purposes only. *//* Use of this program is at your own risk. The author cannot be held *//* responsible if any laws are broken by use of this program. *//* *//* If you use or distribute this code, this message should be held *//* intact. Also, any program based upon this code should display the *//* copyright message and the disclaimer. *//**********************************************************************/ #include #include #include #define LEN_OUTBUF 64#define LEN_INBUF 1024 #define STATE_INIT_COPY 100#define STATE_COPY_INPUT 101#define STATE_SKIP_ML 102#define STATE_CHECKSUM 103#define STATE_READLEN 104#define STATE_DECODE 105#define STATE_UNESCAPE 106#define STATE_FLUSHING 107#define STATE_DBCS 108#define STATE_INIT_READLEN 109 unsigned char rawData[292] = { 0x64,0x37,0x69, 0x50,0x7E,0x2C, 0x22,0x5A,0x65, 0x4A,0x45,0x72, 0x61,0x3A,0x5B, 0x5E,0x79,0x66, 0x5D,0x59,0x75, 0x5B,0x27,0x4C, 0x42,0x76,0x45, 0x60,0x63,0x76, 0x23,0x62,0x2A, 0x65,0x4D,0x43, 0x5F,0x51,0x33, 0x7E,0x53,0x42, 0x4F,0x52,0x20, 0x52,0x20,0x63, 0x7A,0x26,0x4A, 0x21,0x54,0x5A, 0x46,0x71,0x38, 0x20,0x2B,0x79, 0x26,0x66,0x32, 0x63,0x2A,0x57, 0x2A,0x58,0x6C, 0x76,0x7F,0x2B, 0x47,0x7B,0x46, 0x25,0x30,0x52, 0x2C,0x31,0x4F, 0x29,0x6C,0x3D, 0x69,0x49,0x70, 0x3F,0x3F,0x3F, 0x27,0x78,0x7B, 0x3F,0x3F,0x3F, 0x67,0x5F,0x51, 0x3F,0x3F,0x3F, 0x62,0x29,0x7A, 0x41,0x24,0x7E, 0x5A,0x2F,0x3B, 0x66,0x39,0x47, 0x32,0x33,0x41, 0x73,0x6F,0x77, 0x4D,0x21,0x56, 0x43,0x75,0x5F, 0x71,0x28,0x26, 0x39,0x42,0x78, 0x7C,0x46,0x6E, 0x53,0x4A,0x64, 0x48,0x5C,0x74, 0x31,0x48,0x67, 0x72,0x36,0x7D, 0x6E,0x4B,0x68, 0x70,0x7D,0x35, 0x49,0x5D,0x22, 0x3F,0x6A,0x55, 0x4B,0x50,0x3A, 0x6A,0x69,0x60, 0x2E,0x23,0x6A, 0x7F,0x09,0x71, 0x28,0x70,0x6F, 0x35,0x65,0x49, 0x7D,0x74,0x5C, 0x24,0x2C,0x5D, 0x2D,0x77,0x27, 0x54,0x44,0x59, 0x37,0x3F,0x25, 0x7B,0x6D,0x7C, 0x3D,0x7C,0x23, 0x6C,0x43,0x6D, 0x34,0x38,0x28, 0x6D,0x5E,0x31, 0x4E,0x5B,0x39, 0x2B,0x6E,0x7F, 0x30,0x57,0x36, 0x6F,0x4C,0x54, 0x74,0x34,0x34, 0x6B,0x72,0x62, 0x4C,0x25,0x4E, 0x33,0x56,0x30, 0x56,0x73,0x5E, 0x3A,0x68,0x73, 0x78,0x55,0x09, 0x57,0x47,0x4B, 0x77,0x32,0x61, 0x3B,0x35,0x24, 0x44,0x2E,0x4D, 0x2F,0x64,0x6B, 0x59,0x4F,0x44, 0x45,0x3B,0x21, 0x5C,0x2D,0x37, 0x68,0x41,0x53, 0x36,0x61,0x58, 0x58,0x7A,0x48, 0x79,0x22,0x2E, 0x09,0x60,0x50, 0x75,0x6B,0x2D, 0x38,0x4E,0x29, 0x55,0x3D,0x3F, 0x51,0x67,0x2f} ; const unsigned char pick_encoding[64] = { 1, 2, 0, 1, 2, 0, 2, 0, 0, 2, 0, 2, 1, 0, 2, 0, 1, 0, 2, 0, 1, 1, 2, 0, 0, 2, 1, 0, 2, 0, 0, 2, 1, 1, 0, 2, 0, 2, 0, 1, 0, 1, 1, 2, 0, 1, 0, 2, 1, 0, 2, 0, 1, 1, 2, 0, 0, 1, 1, 2, 0, 1, 0, 2}; unsigned char transformed[3][128];int digits[0x7b]; unsigned char unescape (unsigned char c){ static unsigned char escapes[] = "#&!*$"; static unsigned char escaped[] = "\r\n<>@"; int i=0; if (c > 127) return c; while (escapes[i]) { if (escapes[i] == c) return escaped[i]; i++; } return '?';} void maketrans (void){ int i, j; for (i=31; i<=127; i++) for (j=0; j<3; j++) transformed[j][rawData[(i-31)*3 + j]] = (i==31) ? 9 : i;} void makedigits (void){ int i; for (i=0; i<26; i++) { digits['A'+i] = i; digits['a'+i] = i+26; } for (i=0; i<10; i++) digits['0'+i] = i+52; digits[0x2b] = 62; digits[0x2f] = 63;} unsigned long int decodeBase64 (unsigned char *p){ unsigned long int val = 0; val += (digits[p[0]] << 2); val += (digits[p[1]] >> 4); val += (digits[p[1]] & 0xf) << 12; val += ((digits[p[2]] >> 2) << 8); val += ((digits[p[2]] & 0x3) << 22); val += (digits[p[3]] << 16); val += ((digits[p[4]] << 2) << 24); val += ((digits[p[5]] >> 4) << 24); /* 543210 543210 543210 543210 543210 543210 765432 10 ba98 fedc 76 543210 fedcba 98---- |- LSB -||- -||- -| |- MSB -| */ return val;} int isLeadByte (unsigned int cp, unsigned char ucByte){ /* Code page 932 - Japanese Shift-JIS - 0x81-0x9f 0xe0-0xfc 936 - Simplified Chinese GBK - 0xa1-0xfe 949 - Korean Wansung - 0x81-0xfe 950 - Traditional Chinese Big5 - 0x81-0xfe 1361 - Korean Johab - 0x84-0xd3 0xd9-0xde 0xe0-0xf9 */ switch (cp) { case 932: if ((ucByte > 0x80) && (ucByte < 0xa0)) return 1; if ((ucByte > 0xdf) && (ucByte < 0xfd)) return 1; else return 0; case 936: if ((ucByte > 0xa0) && (ucByte < 0xff)) return 1; else return 0; case 949: case 950: if ((ucByte > 0x80) && (ucByte < 0xff)) return 1; else return 0; case 1361: if ((ucByte > 0x83) && (ucByte < 0xd4)) return 1; if ((ucByte > 0xd8) && (ucByte < 0xdf)) return 1; if ((ucByte > 0xdf) && (ucByte < 0xfa)) return 1; else return 0; default: return 0; } } int ScriptDecoder (unsigned char *inname, unsigned char *outname, unsigned int cp){ unsigned char inbuf[LEN_INBUF+1]; unsigned char outbuf[LEN_OUTBUF+1]; unsigned char c, lenbuf[7], csbuf[7]; unsigned char marker[] = "#@~^"; int nextstate, state = 0; int i, j, k, m, ml = 0; unsigned long int csum = 0, len = 0; FILE *infile, *outfile; infile = fopen (inname, "rb"); outfile = fopen (outname, "wb"); if (!infile || !outfile) { printf ("Error opening file!\n"); return 10; } maketrans(); makedigits(); memset (inbuf, 0, sizeof (inbuf)); memset (outbuf, 0, sizeof (outbuf)); memset (lenbuf, 0, sizeof (lenbuf)); state = STATE_INIT_COPY; i = 0; j = 0; while (state) { if (inbuf[i] == 0) { if (feof (infile)) break; memset (inbuf, 0, sizeof (inbuf)); fgets (inbuf, LEN_INBUF, infile); i = 0; continue; } if (j == LEN_OUTBUF) { fwrite (outbuf, sizeof(char), j, outfile); j = 0; } switch (state) { case STATE_INIT_COPY: ml = strlen (marker); m = 0; state = STATE_COPY_INPUT; break; case STATE_COPY_INPUT: if (inbuf[i] == marker[m]) { i++; m++; } else { if (m) { k = 0; state = STATE_FLUSHING; } else outbuf[j++] = inbuf[i++]; } if (m == ml) state = STATE_INIT_READLEN; break; case STATE_FLUSHING: outbuf[j++] = marker[k++]; m--; if (m==0) state = STATE_COPY_INPUT; break; case STATE_SKIP_ML: i++; if (!(--ml)) state = nextstate; break; case STATE_INIT_READLEN: ml = 6; state = STATE_READLEN; break; case STATE_READLEN: lenbuf[6-ml] = inbuf[i++]; if (!(--ml)) { len = decodeBase64 (lenbuf); m = 0; ml = 2; state = STATE_SKIP_ML; nextstate = STATE_DECODE; } break; case STATE_DECODE: if (!len) { ml = 6; state = STATE_CHECKSUM; break; } if (inbuf[i] == '@') state = STATE_UNESCAPE; else { if (inbuf[i] < 0x80) { outbuf[j++] = c = transformed[pick_encoding[m%64]][inbuf[i]]; csum += c; m++; } else { outbuf[j++] = inbuf[i]; if ((cp) && (isLeadByte (cp,inbuf[i]))) state = STATE_DBCS; } } i++; len--; break; case STATE_DBCS: outbuf[j++] = inbuf[i++]; state = STATE_DECODE; break; case STATE_UNESCAPE: outbuf[j++] = c = unescape (inbuf[i++]); csum += c; len--; m++; state = STATE_DECODE; break; case STATE_CHECKSUM: csbuf[6-ml] = inbuf[i++]; if (!(--ml)) { csum -= decodeBase64 (csbuf); if (csum) { //printf ("Error - Incorrect checksum! (%lu)\n", csum); //csum=0; 此处注释掉好点，不然好多时候不能解密 嘿嘿 [icyfox] } m = 0; ml = 6; state = STATE_SKIP_ML; nextstate = STATE_INIT_COPY; } break; default: printf ("Invalid state: %d\n", state); break; } } fwrite (outbuf, sizeof (char), j, outfile); fclose (infile); fclose (outfile); return 0;} int main (int argc, char **argv){ int cp = 0; if (argc < 3) { printf ("Decoder for Microsoft Script Encoder v1.3\n" "(c)2000/2001 MrBrownstone, [email protected]\n" "Home page: http://www.virtualconspiracy.com/scrdec.html\n\n" "Usage: scrdec13 [codepage]\n\n" "Code pages can be 932 - Japanese\n" " 936 - Chinese (Simplified)\n" " 950 - Chinese (Traditional)\n" " 949 - Korean (Wansung)\n" " 1361 - Korean (Johab)\n" "Any other code pages don't need to be specified.\n"); return 10; } if (argc > 3) cp = atoi (argv[3]); return ScriptDecoder (argv[1], argv[2], cp);} |
|
声明：文章版权归原作者所有 部分文章转自互联网 如有侵权请联系
[邮箱地址] 删除
|
