Re: encrypting wsh file

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Al Dunbar [MS-MVP] (alan-no-drub-spam_at_hotmail.com)
Date: 05/10/04 

Date: Mon, 10 May 2004 11:54:49 -0600

"Austin M. Horst" <anonymous@discussions.microsoft.com> wrote in message
news:8FB22A87-1718-41FC-9797-7799E60099B8@microsoft.com...
> Microsoft "Script Encoder"
>
> "Using Script Encoder"
>
http://msdn.microsoft.com/library/en-us/script56/html/seusingscriptencoder.asp
> "Script Encoder Syntax"
>
http://msdn.microsoft.com/library/en-us/script56/html/seconscriptencodersyntax.asp
>
> This is not completely bulletproof.
> There are plenty of utilities out there to decrypt a script.
> If someone is determined, they can decrypt it.

Agreed. There are few ways to do this reliably (hence it is common policy to
disallow this kind of practice in some organizations) other than using NTFS
permissions to prevent anyone but yourself from having access, or simply not
putting the password in the script.

/Al

Relevant Pages

  • Re: script credentials
    ... through a config file (which you could limit access through with the ... If stored credentials are encrypted you *must* decrypt them somehow, ... that a script can pass them to the requesting application. ... "All vulnerabilities deserve a public fear period prior to patches ...
    (Security-Basics)
  • expect spawn and gpg
    ... I have a expect script which encrypt a tar file with a password. ... set infile [concat $intarfile.tar] ... If I run gpg on command line on the same file of size 1.2GB, ... If I try to use gpg to decrypt the 24MB file, ...
    (comp.lang.tcl)
  • Re: decrypt a vi -x encrypted file ???
    ... In comp.os.linux.misc, Chiefy wrote: ... the script is not executable any more. ... mistakenly "cbw") that can interactively decrypt vi-encrypted files. ... As I recall the curses stuff gave me a couple of problems, ...
    (comp.os.linux.misc)
  • decrypting with gpg via web interface
    ... I have a web interface which calls a scriptin in the back end to decrypt a ... gpg file and perform some other actions, I have all the keys install on this ... server as root and when I execute the script as root all works fine. ... The web page calls a shell script which is run the command with sudo to ...
    (alt.linux)
  • Re: encrypting wsh file
    ... Microsoft "Script Encoder" ... This is not completely bulletproof. ... There are plenty of utilities out there to decrypt a script. ...
    (microsoft.public.scripting.wsh)