关于JS加密

xiaoke

document.eglogin.EGPassword.value; |  这句是什么意思
function des (key, message, encrypt, mode, iv) {
var spfunction1 = new Array (0x1010400,0,0x10000,0x1010404,0x1010004,0x10404,0x4,0x10000,0x400,0x1010400,0x1010404,0x400,0x1000404,0x1010004,0x1000000,0x4,0x404,0x1000400,0x1000400,0x10400,0x10400,0x1010000,0x1010000,0x1000404,0x10004,0x1000004,0x1000004,0x10004,0,0x404,0x10404,0x1000000,0x10000,0x1010404,0x4,0x1010000,0x1010400,0x1000000,0x1000000,0x400,0x1010004,0x10000,0x10400,0x1000004,0x400,0x4,0x1000404,0x10404,0x1010404,0x10004,0x1010000,0x1000404,0x1000004,0x404,0x10404,0x1010400,0x404,0x1000400,0x1000400,0,0x10004,0x10400,0,0x1010004);
var spfunction2 = new Array (-0x7fef7fe0,-0x7fff8000,0x8000,0x108020,0x100000,0x20,-0x7fefffe0,-0x7fff7fe0,-0x7fffffe0,-0x7fef7fe0,-0x7fef8000,-0x80000000,-0x7fff8000,0x100000,0x20,-0x7fefffe0,0x108000,0x100020,-0x7fff7fe0,0,-0x80000000,0x8000,0x108020,-0x7ff00000,0x100020,-0x7fffffe0,0,0x108000,0x8020,-0x7fef8000,-0x7ff00000,0x8020,0,0x108020,-0x7fefffe0,0x100000,-0x7fff7fe0,-0x7ff00000,-0x7fef8000,0x8000,-0x7ff00000,-0x7fff8000,0x20,-0x7fef7fe0,0x108020,0x20,0x8000,-0x80000000,0x8020,-0x7fef8000,0x100000,-0x7fffffe0,0x100020,-0x7fff7fe0,-0x7fffffe0,0x100020,0x108000,0,-0x7fff8000,0x8020,-0x80000000,-0x7fefffe0,-0x7fef7fe0,0x108000);
var spfunction3 = new Array (0x208,0x8020200,0,0x8020008,0x8000200,0,0x20208,0x8000200,0x20008,0x8000008,0x8000008,0x20000,0x8020208,0x20008,0x8020000,0x208,0x8000000,0x8,0x8020200,0x200,0x20200,0x8020000,0x8020008,0x20208,0x8000208,0x20200,0x20000,0x8000208,0x8,0x8020208,0x200,0x8000000,0x8020200,0x8000000,0x20008,0x208,0x20000,0x8020200,0x8000200,0,0x200,0x20008,0x8020208,0x8000200,0x8000008,0x200,0,0x8020008,0x8000208,0x20000,0x8000000,0x8020208,0x8,0x20208,0x20200,0x8000008,0x8020000,0x8000208,0x208,0x8020000,0x20208,0x8,0x8020008,0x20200);
var spfunction4 = new Array (0x802001,0x2081,0x2081,0x80,0x802080,0x800081,0x800001,0x2001,0,0x802000,0x802000,0x802081,0x81,0,0x800080,0x800001,0x1,0x2000,0x800000,0x802001,0x80,0x800000,0x2001,0x2080,0x800081,0x1,0x2080,0x800080,0x2000,0x802080,0x802081,0x81,0x800080,0x800001,0x802000,0x802081,0x81,0,0,0x802000,0x2080,0x800080,0x800081,0x1,0x802001,0x2081,0x2081,0x80,0x802081,0x81,0x1,0x2000,0x800001,0x2001,0x802080,0x800081,0x2001,0x2080,0x800000,0x802001,0x80,0x800000,0x2000,0x802080);
var spfunction5 = new Array (0x100,0x2080100,0x2080000,0x42000100,0x80000,0x100,0x40000000,0x2080000,0x40080100,0x80000,0x2000100,0x40080100,0x42000100,0x42080000,0x80100,0x40000000,0x2000000,0x40080000,0x40080000,0,0x40000100,0x42080100,0x42080100,0x2000100,0x42080000,0x40000100,0,0x42000000,0x2080100,0x2000000,0x42000000,0x80100,0x80000,0x42000100,0x100,0x2000000,0x40000000,0x2080000,0x42000100,0x40080100,0x2000100,0x40000000,0x42080000,0x2080100,0x40080100,0x100,0x2000000,0x42080000,0x42080100,0x80100,0x42000000,0x42080100,0x2080000,0,0x40080000,0x42000000,0x80100,0x2000100,0x40000100,0x80000,0,0x40080000,0x2080100,0x40000100);
var spfunction6 = new Array (0x20000010,0x20400000,0x4000,0x20404010,0x20400000,0x10,0x20404010,0x400000,0x20004000,0x404010,0x400000,0x20000010,0x400010,0x20004000,0x20000000,0x4010,0,0x400010,0x20004010,0x4000,0x404000,0x20004010,0x10,0x20400010,0x20400010,0,0x404010,0x20404000,0x4010,0x404000,0x20404000,0x20000000,0x20004000,0x10,0x20400010,0x404000,0x20404010,0x400000,0x4010,0x20000010,0x400000,0x20004000,0x20000000,0x4010,0x20000010,0x20404010,0x404000,0x20400000,0x404010,0x20404000,0,0x20400010,0x10,0x4000,0x20400000,0x404010,0x4000,0x400010,0x20004010,0,0x20404000,0x20000000,0x400010,0x20004010);
var spfunction7 = new Array (0x200000,0x4200002,0x4000802,0,0x800,0x4000802,0x200802,0x4200800,0x4200802,0x200000,0,0x4000002,0x2,0x4000000,0x4200002,0x802,0x4000800,0x200802,0x200002,0x4000800,0x4000002,0x4200000,0x4200800,0x200002,0x4200000,0x800,0x802,0x4200802,0x200800,0x2,0x4000000,0x200800,0x4000000,0x200800,0x200000,0x4000802,0x4000802,0x4200002,0x4200002,0x2,0x200002,0x4000000,0x4000800,0x200000,0x4200800,0x802,0x200802,0x4200800,0x802,0x4000002,0x4200802,0x4200000,0x200800,0,0x2,0x4200802,0,0x200802,0x4200000,0x800,0x4000002,0x4000800,0x800,0x200002);
var spfunction8 = new Array (0x10001040,0x1000,0x40000,0x10041040,0x10000000,0x10001040,0x40,0x10000000,0x40040,0x10040000,0x10041040,0x41000,0x10041000,0x41040,0x1000,0x40,0x10040000,0x10000040,0x10001000,0x1040,0x41000,0x40040,0x10040040,0x10041000,0x1040,0,0,0x10040040,0x10000040,0x10001000,0x41040,0x40000,0x41040,0x40000,0x10041000,0x1000,0x40,0x10040040,0x1000,0x41040,0x10001000,0x40,0x10000040,0x10040000,0x10040040,0x10000000,0x40000,0x10001040,0,0x10041040,0x40040,0x10000040,0x10040000,0x10001000,0x10001040,0,0x10041040,0x41000,0x41000,0x1040,0x1040,0x40040,0x10000000,0x10041000);

var keys = des_createKeys (key);
var m=0, i, j, temp, temp2, right1, right2, left, right, looping;
var cbcleft, cbcleft2, cbcright, cbcright2
var endloop, loopinc;
var len = message.length;
var chunk = 0;
var iterations = keys.length == 32 ? 3 : 9;
if (iterations == 3) {looping = encrypt ? new Array (0, 32, 2) : new Array (30, -2, -2);}
else {looping = encrypt ? new Array (0, 32, 2, 62, 30, -2, 64, 96, 2) : new Array (94, 62, -2, 32, 64, 2, 30, -2, -2);}

message += "\0\0\0\0\0\0\0\0";
result = "";
tempresult = "";

if (mode == 1) {
  cbcleft = (iv.charCodeAt(m++) << 24) | (iv.charCodeAt(m++) << 16) | (iv.charCodeAt(m++) << 8) | iv.charCodeAt(m++);
  cbcright = (iv.charCodeAt(m++) << 24) | (iv.charCodeAt(m++) << 16) | (iv.charCodeAt(m++) << 8) | iv.charCodeAt(m++);
  m=0;
}

while (m < len) {
  left = (message.charCodeAt(m++) << 24) | (message.charCodeAt(m++) << 16) | (message.charCodeAt(m++) << 8) | message.charCodeAt(m++);
  right = (message.charCodeAt(m++) << 24) | (message.charCodeAt(m++) << 16) | (message.charCodeAt(m++) << 8) | message.charCodeAt(m++);

  if (mode == 1) {if (encrypt) {left ^= cbcleft; right ^= cbcright;} else {cbcleft2 = cbcleft; cbcright2 = cbcright; cbcleft = left; cbcright = right;}}

  temp = ((left >>> 4) ^ right) & 0x0f0f0f0f; right ^= temp; left ^= (temp << 4);
  temp = ((left >>> 16) ^ right) & 0x0000ffff; right ^= temp; left ^= (temp << 16);
  temp = ((right >>> 2) ^ left) & 0x33333333; left ^= temp; right ^= (temp << 2);
  temp = ((right >>> 8) ^ left) & 0x00ff00ff; left ^= temp; right ^= (temp << 8);
  temp = ((left >>> 1) ^ right) & 0x55555555; right ^= temp; left ^= (temp << 1);

  left = ((left << 1) | (left >>> 31));
  right = ((right << 1) | (right >>> 31));

  for (j=0; j<iterations; j+=3) {
   endloop = looping[j+1];
   loopinc = looping[j+2];
   for (i=looping[j]; i!=endloop; i+=loopinc) {
    right1 = right ^ keys;
    right2 = ((right >>> 4) | (right << 28)) ^ keys[i+1];
    temp = left;
    left = right;
    right = temp ^ (spfunction2[(right1 >>> 24) & 0x3f] | spfunction4[(right1 >>> 16) & 0x3f]
       | spfunction6[(right1 >>> 8) & 0x3f] | spfunction8[right1 & 0x3f]
       | spfunction1[(right2 >>> 24) & 0x3f] | spfunction3[(right2 >>> 16) & 0x3f]
       | spfunction5[(right2 >>> 8) & 0x3f] | spfunction7[right2 & 0x3f]);
   }
   temp = left; left = right; right = temp;
  }

  left = ((left >>> 1) | (left << 31));
  right = ((right >>> 1) | (right << 31));

  temp = ((left >>> 1) ^ right) & 0x55555555; right ^= temp; left ^= (temp << 1);
  temp = ((right >>> 8) ^ left) & 0x00ff00ff; left ^= temp; right ^= (temp << 8);
  temp = ((right >>> 2) ^ left) & 0x33333333; left ^= temp; right ^= (temp << 2);
  temp = ((left >>> 16) ^ right) & 0x0000ffff; right ^= temp; left ^= (temp << 16);
  temp = ((left >>> 4) ^ right) & 0x0f0f0f0f; right ^= temp; left ^= (temp << 4);

  if (mode == 1) {if (encrypt) {cbcleft = left; cbcright = right;} else {left ^= cbcleft2; right ^= cbcright2;}}
  tempresult += String.fromCharCode ((left>>>24), ((left>>>16) & 0xff), ((left>>>8) & 0xff), (left & 0xff), (right>>>24), ((right>>>16) & 0xff), ((right>>>8) & 0xff), (right & 0xff));

  chunk += 8;
  if (chunk == 512) {result += tempresult; tempresult = ""; chunk = 0;}
}

return result + tempresult;
}
function des_createKeys (key) {
pc2bytes0 = new Array (0,0x4,0x20000000,0x20000004,0x10000,0x10004,0x20010000,0x20010004,0x200,0x204,0x20000200,0x20000204,0x10200,0x10204,0x20010200,0x20010204);
pc2bytes1 = new Array (0,0x1,0x100000,0x100001,0x4000000,0x4000001,0x4100000,0x4100001,0x100,0x101,0x100100,0x100101,0x4000100,0x4000101,0x4100100,0x4100101);
pc2bytes2 = new Array (0,0x8,0x800,0x808,0x1000000,0x1000008,0x1000800,0x1000808,0,0x8,0x800,0x808,0x1000000,0x1000008,0x1000800,0x1000808);
pc2bytes3 = new Array (0,0x200000,0x8000000,0x8200000,0x2000,0x202000,0x8002000,0x8202000,0x20000,0x220000,0x8020000,0x8220000,0x22000,0x222000,0x8022000,0x8222000);
pc2bytes4 = new Array (0,0x40000,0x10,0x40010,0,0x40000,0x10,0x40010,0x1000,0x41000,0x1010,0x41010,0x1000,0x41000,0x1010,0x41010);
pc2bytes5 = new Array (0,0x400,0x20,0x420,0,0x400,0x20,0x420,0x2000000,0x2000400,0x2000020,0x2000420,0x2000000,0x2000400,0x2000020,0x2000420);
pc2bytes6 = new Array (0,0x10000000,0x80000,0x10080000,0x2,0x10000002,0x80002,0x10080002,0,0x10000000,0x80000,0x10080000,0x2,0x10000002,0x80002,0x10080002);
pc2bytes7 = new Array (0,0x10000,0x800,0x10800,0x20000000,0x20010000,0x20000800,0x20010800,0x20000,0x30000,0x20800,0x30800,0x20020000,0x20030000,0x20020800,0x20030800);
pc2bytes8 = new Array (0,0x40000,0,0x40000,0x2,0x40002,0x2,0x40002,0x2000000,0x2040000,0x2000000,0x2040000,0x2000002,0x2040002,0x2000002,0x2040002);
pc2bytes9 = new Array (0,0x10000000,0x8,0x10000008,0,0x10000000,0x8,0x10000008,0x400,0x10000400,0x408,0x10000408,0x400,0x10000400,0x408,0x10000408);
pc2bytes10 = new Array (0,0x20,0,0x20,0x100000,0x100020,0x100000,0x100020,0x2000,0x2020,0x2000,0x2020,0x102000,0x102020,0x102000,0x102020);
pc2bytes11 = new Array (0,0x1000000,0x200,0x1000200,0x200000,0x1200000,0x200200,0x1200200,0x4000000,0x5000000,0x4000200,0x5000200,0x4200000,0x5200000,0x4200200,0x5200200);
pc2bytes12 = new Array (0,0x1000,0x8000000,0x8001000,0x80000,0x81000,0x8080000,0x8081000,0x10,0x1010,0x8000010,0x8001010,0x80010,0x81010,0x8080010,0x8081010);
pc2bytes13 = new Array (0,0x4,0x100,0x104,0,0x4,0x100,0x104,0x1,0x5,0x101,0x105,0x1,0x5,0x101,0x105);

var iterations = key.length >= 24 ? 3 : 1;
var keys = new Array (32 * iterations);
var shifts = new Array (0, 0, 1, 1, 1, 1, 1, 1, 0, 1, 1, 1, 1, 1, 1, 0);
var lefttemp, righttemp, m=0, n=0, temp;

for (var j=0; j<iterations; j++) {
  left = (key.charCodeAt(m++) << 24) | (key.charCodeAt(m++) << 16) | (key.charCodeAt(m++) << 8) | key.charCodeAt(m++);
  right = (key.charCodeAt(m++) << 24) | (key.charCodeAt(m++) << 16) | (key.charCodeAt(m++) << 8) | key.charCodeAt(m++);

  temp = ((left >>> 4) ^ right) & 0x0f0f0f0f; right ^= temp; left ^= (temp << 4);
  temp = ((right >>> -16) ^ left) & 0x0000ffff; left ^= temp; right ^= (temp << -16);
  temp = ((left >>> 2) ^ right) & 0x33333333; right ^= temp; left ^= (temp << 2);
  temp = ((right >>> -16) ^ left) & 0x0000ffff; left ^= temp; right ^= (temp << -16);
  temp = ((left >>> 1) ^ right) & 0x55555555; right ^= temp; left ^= (temp << 1);
  temp = ((right >>> 8) ^ left) & 0x00ff00ff; left ^= temp; right ^= (temp << 8);
  temp = ((left >>> 1) ^ right) & 0x55555555; right ^= temp; left ^= (temp << 1);

  temp = (left << 8) | ((right >>> 20) & 0x000000f0);
  left = (right << 24) | ((right << 8) & 0xff0000) | ((right >>> 8) & 0xff00) | ((right >>> 24) & 0xf0);
  right = temp;

  for (i=0; i < shifts.length; i++) {
   if (shifts) {left = (left << 2) | (left >>> 26); right = (right << 2) | (right >>> 26);}
   else {left = (left << 1) | (left >>> 27); right = (right << 1) | (right >>> 27);}
   left &= -0xf; right &= -0xf;
   lefttemp = pc2bytes0[left >>> 28] | pc2bytes1[(left >>> 24) & 0xf]
       | pc2bytes2[(left >>> 20) & 0xf] | pc2bytes3[(left >>> 16) & 0xf]
       | pc2bytes4[(left >>> 12) & 0xf] | pc2bytes5[(left >>> 8) & 0xf]
       | pc2bytes6[(left >>> 4) & 0xf];
   righttemp = pc2bytes7[right >>> 28] | pc2bytes8[(right >>> 24) & 0xf]
        | pc2bytes9[(right >>> 20) & 0xf] | pc2bytes10[(right >>> 16) & 0xf]
        | pc2bytes11[(right >>> 12) & 0xf] | pc2bytes12[(right >>> 8) & 0xf]
        | pc2bytes13[(right >>> 4) & 0xf];
   temp = ((righttemp >>> 16) ^ lefttemp) & 0x0000ffff;
   keys[n++] = lefttemp ^ temp; keys[n++] = righttemp ^ (temp << 16);
  }
}
return keys;
}
function stringToHex (s) {
var r = "";
var hexes = new Array ("0","1","2","3","4","5","6","7","8","9","a","b","c","d","e","f");
for (var i=0; i<s.length; i++) {r += hexes [s.charCodeAt(i) >> 4] + hexes [s.charCodeAt(i) & 0xf];}
return r;
}
function preprocess()
{
var key2;
var key1;
key1="83507573";
key2=document.eglogin.EGRndPassword.value;
var inputpassword;
var trannewpassword1;
var trannewpassword2;
inputpassword=document.eglogin.EGPassword.value;
trannewpassword2=stringToHex(des(key2,inputpassword,1,0));
trannewpassword1=stringToHex(des(key1,trannewpassword2,1,0));
document.eglogin.EGPassword.value=trannewpassword1;
}
这个是加密代码   最下面是运算方法   可是算来算去登陆不上去。。。
求大家帮我看看  这个应该是加密代码

小磊

document.eglogin.EGRndPassword.value应该是取密码的值

xiaoke

小磊 发表于 2012-7-8 00:50
document.eglogin.EGRndPassword.value应该是取密码的值

我猜测也是取密码的值 看代码也非常像加密 运行下来 计算出来的值  和 截取到的值不同

这个是登陆框架  小磊大大  帮我分析下  我看的不太明白

document.writeln("<table width=94% border=0 align=center cellpadding=0 cellspacing=0>");
document.writeln("<tr>");
document.writeln("<td width=36% height=35 align=right>&ucirc;</td>");
document.writeln("<td colspan=2 align=left><input type=text size=14 maxlength=50 name=EGLoginName class=input tabindex=1 onkeypress='return keySubmit()';></td>");
document.writeln("</tr>");
document.writeln("<tr>");
document.writeln("<td width=36% height=35 align=right>密码</td>");
document.writeln("<td colspan=2 align=left><OBJECT classid=clsid:054527AE-EB44-4229-8987-15CE9210E307 id=EGEDIT CODEBASE=/EGSafeCode.ocx width=100 height=20 class=input tabindex=2></OBJECT><input type=hidden name=EGPassword></td>");
document.writeln("</tr>");
document.writeln("<tr>");
document.writeln("<td width=36% height=35 align=right>&#1825;</td>");
document.writeln("<td colspan=2 align=left><input type=text size=4 maxlength=6 name=SafePassword class=input tabindex=3 onkeypress='return keySubmit()';> <script>document.write(\"<img align=absMiddle id=mbkimg src=\'\/include\/RndMBK.asp?\",Math.random(),\"\'>\")<\/script></td>");
document.writeln("</tr>");
document.writeln("<tr>");
document.writeln("<td width=36% height=35 align=right>&#1444;&#47354;</td>");
document.writeln("<td width=19% align=left><input type=text size=4 maxlength=4 name=EGRndPassword class=input tabindex=4 onkeypress='return keySubmit()';></td>");
document.writeln("<td width=45% align=left><script>document.write(\"<img align=absMiddle id=imgVerify style={cursor:hand;} src=\'\/include\/ImgVerify.asp?\",Math.random(),\"\' onclick=\'javascript:changeRndImg();\'>\")<\/script></td>");
document.writeln("</tr>");
document.writeln("<tr>");
document.writeln("<td height=35 colspan=3 align=center valign=middle><a href=\"javascript:checkinput();\"><img src=/images/homepage/style14/icon_dl.gif border=0></a><a href=Register.asp><img src=/images/homepage/style14/icon_zc.gif border=0></a></td>");
document.writeln("</tr>");
document.writeln("<tr>");
document.writeln("<td colspan=3 height=35 align=center><img src=/images/homepage/style14/activex.gif> <a href=/&#445;&#808;&#555;&#1596;_IE.exe>&#555;&#1596;<\/a> <img src=/images/homepage/style14/logintools.gif width=14 height=14> <a href=/DownLoginTools.asp>&frac14;</a></td>");
document.writeln("</tr>");
document.writeln("</table>")

xiaoke

.版本 2

url ＝ “http://hh0809.586.es/WebLogin.asp?Action=Login”
str ＝ “EGLoginName=xiaoke214&EGPassword=32decdb3c5d44c58a74ad55090a9de4b&SafePassword={code1}&EGRndPassword={code2}&Login_my=” ＋ “05894562” ＋ “&EGLoginHardware=dd84cf2ba5dc23bfa21bc6932bd46e20d0eeaef7cc8e876a6d3ac29cb9997ff3&GotoUrl=&isr=0&key=D154E6E076C450256F3CA98AD3F96F4A”

登陆post

小磊

xiaoke 发表于 2012-7-8 08:57
.版本 2

url ＝ “http://hh0809.586.es/WebLogin.asp?Action=Login”

function preprocess()
{
var key2;
var key1;
key1="83507573";
key2="密码";
var inputpassword;
var trannewpassword1;
var trannewpassword2;
var trannewpassword3;
inputpassword="密码";
trannewpassword2=stringToHex(des(key2,inputpassword,1,0));
trannewpassword1=stringToHex(des(key1,trannewpassword2,1,0));
trannewpassword3=trannewpassword1;
return trannewpassword3;
}

替换“密码”以后执行preprocess子程序，应该就不会错了

xiaoke

小磊 发表于 2012-7-8 10:34
function preprocess()
{
var key2;

这样试验过了 不行的 ，，，  再说key2  不是密码  是验证码的值

96bdda50e025b83739cc243b1a6604c6e0ba623081e29a63c92f6bc126777e23   

结果是64位的值  
而正确的密码是32位

还有 我肯定是用到【Login_my=” ＋ “05894562” ＋   】 这个值加密的  应为post的时候修改了这个值 就提示密码错误  还有验证码是改变了的  当时照样登陆的上  
所以基本肯定  上面的JS代码没找对  但是找来找去 就这段像
太抽象了

咖啡糖

有偿解决{:3_244:}

xiaoke

咖啡糖 发表于 2012-7-11 17:14
有偿解决

只是学习 不是赚钱项目 没必要了

等风的人

xiaoke 发表于 2012-7-8 11:32
这样试验过了 不行的 ，，，  再说key2  不是密码  是验证码的值

96bdda50e025b83739cc243b1a6604c6 ...

login_my  可以直接在网页获取  不需要计算的   我也被这个加密困住了   我这边提交的数据是16位 我算出来的是32位 我郁闷死了