供销大集-JS修改

aes("a123456")

1.搜索password

可以猜测 寻找匹配项

然后把密码 给t

2.也可以直接直接从这里往上,找到一个 encrypt函数下断点调试输出

function aes(pwd)
{
var aes=new AES.Crypto;
return aes.encrypt(pwd);
}

var AES = {
sbox: [99, 124, 119, 123, 242, 107, 111, 197, 48, 1, 103, 43, 254, 215, 171, 118, 202, 130, 201, 125, 250, 89, 71, 240, 173, 212, 162, 175, 156, 164, 114, 192, 183, 253, 147, 38, 54, 63, 247, 204, 52, 165, 229, 241, 113, 216, 49, 21, 4, 199, 35, 195, 24, 150, 5, 154, 7, 18, 128, 226, 235, 39, 178, 117, 9, 131, 44, 26, 27, 110, 90, 160, 82, 59, 214, 179, 41, 227, 47, 132, 83, 209, 0, 237, 32, 252, 177, 91, 106, 203, 190, 57, 74, 76, 88, 207, 208, 239, 170, 251, 67, 77, 51, 133, 69, 249, 2, 127, 80, 60, 159, 168, 81, 163, 64, 143, 146, 157, 56, 245, 188, 182, 218, 33, 16, 255, 243, 210, 205, 12, 19, 236, 95, 151, 68, 23, 196, 167, 126, 61, 100, 93, 25, 115, 96, 129, 79, 220, 34, 42, 144, 136, 70, 238, 184, 20, 222, 94, 11, 219, 224, 50, 58, 10, 73, 6, 36, 92, 194, 211, 172, 98, 145, 149, 228, 121, 231, 200, 55, 109, 141, 213, 78, 169, 108, 86, 244, 234, 101, 122, 174, 8, 186, 120, 37, 46, 28, 166, 180, 198, 232, 221, 116, 31, 75, 189, 139, 138, 112, 62, 181, 102, 72, 3, 246, 14, 97, 53, 87, 185, 134, 193, 29, 158, 225, 248, 152, 17, 105, 217, 142, 148, 155, 30, 135, 233, 206, 85, 40, 223, 140, 161, 137, 13, 191, 230, 66, 104, 65, 153, 45, 15, 176, 84, 187, 22],
Invsbox: [82, 9, 106, 213, 48, 54, 165, 56, 191, 64, 163, 158, 129, 243, 215, 251, 124, 227, 57, 130, 155, 47, 255, 135, 52, 142, 67, 68, 196, 222, 233, 203, 84, 123, 148, 50, 166, 194, 35, 61, 238, 76, 149, 11, 66, 250, 195, 78, 8, 46, 161, 102, 40, 217, 36, 178, 118, 91, 162, 73, 109, 139, 209, 37, 114, 248, 246, 100, 134, 104, 152, 22, 212, 164, 92, 204, 93, 101, 182, 146, 108, 112, 72, 80, 253, 237, 185, 218, 94, 21, 70, 87, 167, 141, 157, 132, 144, 216, 171, 0, 140, 188, 211, 10, 247, 228, 88, 5, 184, 179, 69, 6, 208, 44, 30, 143, 202, 63, 15, 2, 193, 175, 189, 3, 1, 19, 138, 107, 58, 145, 17, 65, 79, 103, 220, 234, 151, 242, 207, 206, 240, 180, 230, 115, 150, 172, 116, 34, 231, 173, 53, 133, 226, 249, 55, 232, 28, 117, 223, 110, 71, 241, 26, 113, 29, 41, 197, 137, 111, 183, 98, 14, 170, 24, 190, 27, 252, 86, 62, 75, 198, 210, 121, 32, 154, 219, 192, 254, 120, 205, 90, 244, 31, 221, 168, 51, 136, 7, 199, 49, 177, 18, 16, 89, 39, 128, 236, 95, 96, 81, 127, 169, 25, 181, 74, 13, 45, 229, 122, 159, 147, 201, 156, 239, 160, 224, 59, 77, 174, 42, 245, 176, 200, 235, 187, 60, 131, 83, 153, 97, 23, 43, 4, 126, 186, 119, 214, 38, 225, 105, 20, 99, 85, 33, 12, 125],
rcon: [[0, 0, 0, 0], [1, 0, 0, 0], [2, 0, 0, 0], [4, 0, 0, 0], [8, 0, 0, 0], [16, 0, 0, 0], [32, 0, 0, 0], [64, 0, 0, 0], [128, 0, 0, 0], [27, 0, 0, 0], [54, 0, 0, 0]],
cipher: function(e, t) {
    var n = 4;
    var r = t.length / n - 1;
    var i = [new Array(n), new Array(n), new Array(n), new Array(n)];
    var s = new Array(4 * n);
    var o, u;
    for (o = 0; o < e.length; o++) {
        i[o % 4][Math.floor(o / 4)] = e[o]
    }
    this.addRoundKey(i, t, 0, n);
    for (u = 1; u < r; u++) {
        this.subBytes(i, n, 0);
        this.shiftRows(i, n, 0);
        this.mixColumns(i, n, 0);
        this.addRoundKey(i, t, u, n)
    }
    this.subBytes(i, n, 0);
    this.shiftRows(i, n, 0);
    this.addRoundKey(i, t, r, n);
    for (o = 0; o < s.length; o++) {
        s[o] = i[o % 4][Math.floor(o / 4)]
    }
    return s
},
Invcipher: function(e, t) {
    var n = 4;
    var r = t.length / n - 1;
    var i = [new Array(n), new Array(n), new Array(n), new Array(n)];
    var s = new Array(4 * n);
    var o, u;
    for (o = 0; o < e.length; o++) {
        i[o % 4][Math.floor(o / 4)] = e[o]
    }
    this.addRoundKey(i, t, r, n);
    for (u = r - 1; u >= 1; u--) {
        this.shiftRows(i, n, 1);
        this.subBytes(i, n, 1);
        this.addRoundKey(i, t, u, n);
        this.mixColumns(i, n, 1)
    }
    this.shiftRows(i, n, 1);
    this.subBytes(i, n, 1);
    this.addRoundKey(i, t, u, n);
    for (o = 0; o < s.length; o++) {
        s[o] = i[o % 4][Math.floor(o / 4)]
    }
    return s
},
subBytes: function(e, t, n) {
    var r, i;
    var n = n || 0;
    var s = n === 0 ? this.sbox: this.Invsbox;
    for (i = 0; i < t; i++) {
        for (r = 0; r < 4; r++) {
            e[r][i] = s[e[r][i]]
        }
    }
},
shiftRows: function(e, t, n) {
    var r = new Array(t);
    var n = n || 0;
    var i, s;
    n = n === 0 ? 1 : -1;
    for (i = 1; i < 4; i++) {
        for (s = 0; s < t; s++) {
            r[s] = e[i][(s + i * n + t) % t]
        }
        for (s = 0; s < 4; s++) {
            e[i][s] = r[s]
        }
    }
},
mixColumns: function(e, t, n) {
    var r, i, s;
    var o = new Array(t);
    var u = [[2, 3, 1, 1], [14, 11, 13, 9]];
    for (i = 0; i < t; i++) {
        for (r = 0; r < 4; r++) {
            o[r] = e[r][i]
        }
        for (r = 0; r < 4; r++) {
            e[r][i] = 0;
            for (s = 0; s < 4; s++) {
                e[r][i] ^= this.FFmul(u[n][s], o[(r + s) % 4])
            }
        }
    }
},
FFmul: function(e, t) {
    var n = new Array(4);
    var r = 0;
    var i;
    n[0] = t;
    for (i = 1; i < 4; i++) {
        n[i] = n[i - 1] << 1;
        if (n[i - 1] & 128) {
            n[i] ^= 283
        }
    }
    for (i = 0; i < 4; i++) {
        if (e >> i & 1) {
            r ^= n[i]
        }
    }
    return r
},
addRoundKey: function(e, t, n, r) {
    var i, s;
    for (s = 0; s < r; s++) {
        for (i = 0; i < 4; i++) {
            e[i][s] ^= t[n * 4 + s][i]
        }
    }
},
keyExpansion: function(e) {
    var t = e.length / 4;
    var n = 4;
    var r = t + 6;
    var i = new Array(n * (r + 1));
    var s = new Array(4);
    var o, u;
    for (o = 0; o < t; o++) {
        i[o] = [e[4 * o], e[4 * o + 1], e[4 * o + 2], e[4 * o + 3]]
    }
    for (o = t; o < i.length; o++) {
        i[o] = new Array(4);
        for (u = 0; u < 4; u++) {
            s[u] = i[o - 1][u]
        }
        if (o % t === 0) {
            this.rotWord(s);
            this.subWord(s);
            for (u = 0; u < 4; u++) {
                s[u] ^= AES.rcon[o / t][u]
            }
        } else if (t > 6 && o % t === 4) {
            this.subWord(s)
        }
        for (u = 0; u < 4; u++) {
            i[o][u] = i[o - t][u] ^ s[u]
        }
    }
    return i
},
rotWord: function(e) {
    var t = e[0];
    var n;
    for (n = 0; n < 3; n++) {
        e[n] = e[n + 1]
    }
    e[3] = t
},
subWord: function(e) {
    var t;
    for (t = 0; t < 4; t++) {
        e[t] = this.sbox[e[t]]
    }
}
};
AES.Crypto = function() {
this.String2Array = function(e, t) {
    var n;
    if (t != null) {
        var r = new Array(16);
        var i = 16 * (t + 1);
        var s = e.length >= i ? 0 : i - e.length;
        for (n = 0; n < 16; n++) {
            r[n] = e.charCodeAt(16 * t + n) || s
        }
    } else {
        var o = e.length <= 16 ? 16 : e.length <= 24 ? 24 : 32;
        var r = new Array(o);
        for (n = 0; n < o; n++) {
            r[n] = e.charCodeAt(n) || 0
        }
    }
    return r
};
this.Byte2Char = function(e) {
    var t;
    var n = "";
    for (t = 0; t < e.length / 2; t++) {
        n += String.fromCharCode(parseInt(e[t * 2], 16) * 16 + parseInt(e[t * 2 + 1], 16))
    }
    return n
};
this.encrypt = function(t) {
    var n = Math.ceil(t.length / e);
    if (t.length / e == n) {
        n += 1
    }
    var r = new Array;
    var i, s, o;
    var u, a;
    for (u = 0; u < n; u++) {
        i = AES.cipher(this.String2Array(t, u), this.keySchedule);
        o = u * e;
        for (a = 0; a < 16; a++) {
            r[o + a] = i[a] < 16 ? "0" + i[a].toString(16) : i[a].toString(16)
        }
    }
    return r.join("")
};
var e = 16;
this.key = this.String2Array("10.72.86.390.HNA", null);
this.keySchedule = AES.keyExpansion(this.key);
this.decrypt = function(t) {
    var n = Math.ceil(t.length / e * .5);
    var r = new Array;
    var i, s, o;
    var u, a;
    t = this.Byte2Char(t);
    for (u = 0; u < n; u++) {
        i = AES.Invcipher(this.String2Array(t, u), this.keySchedule);
        o = u * e;
        for (a = 0; a < 16 && i[a] != 0; a++) {
            r[o + a] = String.fromCharCode(i[a])
        }
    }
    return r.join("")
}
};