破解微软脚本加密算法

    技术2022-05-11  147

    很久没有关心过web开发版,以后可能会来的更少,今天发布一个破解微软脚本加密算法的vbScript 脚本,算是给出把力吧。

    这是一个编写的相当精巧的,用于还原Script Encoder加密后的script代码,用过asp的人应该知道,微软提供的脚本保护技术很弱,本人在csdn 发布过aspDecoder,以前也发布过几个版本,最近得到该源码(来源不记得了),是用vbScript编写的;

    复制以下代码到txt文件中,使用前修改后缀为 .vbs 。可以方便的修改为visual basic 或 ASP 程序;

    option explicitDim oArgs, NomFichier'Optional argument : the encoded filenameNomFichier=""Set oArgs = WScript.ArgumentsSelect Case oArgs.CountCase 0 'No Arg, popup a dialog box to choose the file NomFichier=BrowseForFolder("Choose an encoded file", &H4031, &H0011)Case 1 If Instr(oArgs(0),"?")=0 Then '-? ou /? => aide  NomFichier=oArgs(0) End IfCase Else WScript.Echo "Too many parameters"End SelectSet oArgs = Nothing

    If NomFichier<>"" Then Dim fso Set fso=WScript.CreateObject("Scripting.FileSystemObject") If fso.FileExists(NomFichier) Then  Dim fic,contenu  Set fic = fso.OpenTextFile(NomFichier, 1)  Contenu=fic.readAll  fic.close  Set fic=Nothing

      Const TagInit="#@~^" '#@~^awQAAA==  Const TagFin="==^#~@" '& chr(0)  Dim DebutCode, FinCode  Do   FinCode=0   DebutCode=Instr(Contenu,TagInit)   If DebutCode>0 Then    If (Instr(DebutCode,Contenu,"==")-DebutCode)=10 Then 'If "==" follows the tag     FinCode=Instr(DebutCode,Contenu,TagFin)     If FinCode>0 Then      Contenu=Left(Contenu,DebutCode-1) & _      Decode(Mid(Contenu,DebutCode+12,FinCode-DebutCode-12-6)) & _      Mid(Contenu,FinCode+6)           End If    End If   End If  Loop Until FinCode=0  WScript.Echo Contenu Else  WScript.Echo Nomfichier & " not found" End If Set fso=NothingElse WScript.Echo "Please give a filename" WScript.Echo "Usage : " & wscript.fullname  & " " & WScript.ScriptFullName & " <filename>"End If

    Function Decode(Chaine) Dim se,i,c,j,index,ChaineTemp Dim tDecode(127)

     Const Combinaison="1231232332321323132311233213233211323231311231321323112331123132" Set se=WSCript.CreateObject("Scripting.Encoder") For i=9 to 127  tDecode(i)="JLA" Next For i=9 to 127  ChaineTemp=Mid(se.EncodeScriptFile(".vbs",string(3,i),0,""),13,3)  For j=1 to 3   c=Asc(Mid(ChaineTemp,j,1))   tDecode(c)=Left(tDecode(c),j-1) & chr(i) & Mid(tDecode(c),j+1)  Next Next 'Next line we correct a bug, otherwise a ")" could be decoded to a ">" tDecode(42)=Left(tDecode(42),1) & ")" & Right(tDecode(42),1) Set se=Nothing

     Chaine=Replace(Replace(Chaine,"@&",chr(10)),"@#",chr(13)) Chaine=Replace(Replace(Chaine,"@*",">"),"@!","<") Chaine=Replace(Chaine,"@$","@") index=-1 For i=1 to Len(Chaine)  c=asc(Mid(Chaine,i,1))  If c<128 Then index=index+1  If (c=9) or ((c>31) and (c<128)) Then   If (c<>60) and (c<>62) and (c<>64) Then    Chaine=Left(Chaine,i-1) & Mid(tDecode(c),Mid(Combinaison,(index mod 64)+1,1),1) & Mid(Chaine,i+1)   End If  End If Next Decode=ChaineEnd Function

    Function BrowseForFolder(ByVal pstrPrompt, ByVal pintBrowseType, ByVal pintLocation) Dim ShellObject, pstrTempFolder, x Set ShellObject=WScript.CreateObject("Shell.Application") On Error Resume Next Set pstrTempFolder=ShellObject.BrowseForFolder(&H0,pstrPrompt,pintBrowseType,pintLocation) BrowseForFolder=pstrTempFolder.ParentFolder.ParseName(pstrTempFolder.Title).Path If Err.Number<>0 Then BrowseForFolder="" Set pstrTempFolder=Nothing Set ShellObject=NothingEnd Function

     


    最新回复(0)