Encode my script

Forums

My Profile

Inbox

Address Book

My Subscription

My Forums

Encode my script

Logged in as: Guest

arrSession:exec spGetSession 2,2,42308

	Active Users: There are 0 members and 0 guests.
	Users viewing this topic: none

Printable Version

All Forums >> [Scripting] >> WSH & Client Side VBScript >> Encode my script
Do you like VisualBasicScript.com? Link to us and help spread the word about our forum. Thanks!

Page: [1]

Message

<< Older Topic Newer Topic >>

Encode my script - 1/22/2007 4:43:03 AM

avipenina

Posts: 102
Score: 0
Joined: 4/24/2006
Status: offline

Hi,

i've this script that change administrator local password, i run it through Machine GPO and it run good.
now i need to Encode this script because users will be able to see the password.
this is the script:

Set WSHShell = CreateObject("WScript.Shell")

WSHShell.Run "net user Administrator password"

i download this program to Encode the script

Script Encoder

http://www.microsoft.com/downloads/details.aspx?familyid=e7877f67-c447-4873-b1b0-21f0626a6329&displaylang=en

after i Encode the script i can't run it anymore,i get an error message
Expected Statement. Why? and how i can Encode this script or any other script that can change the administrator local password when Machine boot up through GPO?

Post #: 1

RE: Encode my script - 1/22/2007 4:52:16 AM

dm_4ever

Posts: 2722
Score: 46
Joined: 6/29/2006
From: Orange County, California
Status: offline

Just so you know, scripts encoded with MS Script Encoder can be unencoded just as easily. I haven't tried it yet, but someone here at work informed me of this: http://www.moernaut.com/default.aspx?item=supercrypt

_____________________________

dm_4ever

My philosophy: K.I.S.S - Keep It Simple Stupid
Read Me: http://www.visualbasicscript.com/m_24727/tm.htm
Frequently Asked Stuff: http://www.visualbasicscript.com/m_47117/tm.htm

(in reply to avipenina)

Post #: 2

RE: Encode my script - 1/22/2007 5:03:21 AM

TNO

Posts: 1399
Score: 16
Joined: 12/18/2004
From: thenewobjective.com
Status: offline

If you run this script remotely and through an administrator account, then why would it matter if its encoded or not? You could even have it delete itself after the fact.

_____________________________

To iterate is human, to recurse divine. -- L. Peter Deutsch

(in reply to dm_4ever)

Post #: 3

RE: Encode my script - 1/22/2007 5:15:05 AM

Parabellum

Posts: 222
Score: 0
Joined: 11/12/2006
From: UK
Status: offline

I've done a bit of looking into this area myself, and found a couple of solutions,
windows includes a tool called IExpress (which can be run by typing iexpress in the run dialog) this will package the script into an executable,
the problem is that anyone with a bit of nounce will realise you can use winRar to unpackage it, so then came the second solution.
I found a program called "ExeScript", whcih seems to compile the scipt, and then decompile as it runs it.
Works great, except you its not free (costs about $20) and can also only handle one file at a time, eg. one vbs file.
(This is fine 90% of the time, unless your calling other scripts or executables from you main script)

My solution was to use a combination. I compile the scripts using ExeScript, and then package all the files together using IEXPRESS, with user prompts disabled.
I'm sure its not completely hack proof but definatley will deter the casual snooper or office smart a$$ who likes to think he's an uber hacker!!

(in reply to TNO)

Post #: 4

RE: Encode my script - 1/22/2007 8:11:07 AM

avipenina

Posts: 102
Score: 0
Joined: 4/24/2006
Status: offline

Thx for ur replays

now can u tell me why i can't encode this simple script

Set WSHShell = CreateObject("WScript.Shell")
WSHShell.Run "net user Administrator password"

i save it as ChgPass.vbs

second question

in GPO Machine startup i can put this script and there is an option in the startup gpo to add parameters to the script
how i can make this simple script that use the "net user" to accept the passowrd change in parameter that he will take from the gpo parameter
the link below is a picture of that gpo parameter that i can put.
the script dosen't have to be a .vbs if u have other suggestions like .bat or something else it will be good to, only that the password needs to be discrete, beacuse if i put this script with the password inside a user can enter the \\ServerName\SYSVOL\Domain\Policies\UID\Machine\Scripts\Startup and view the password.

http://img58.imageshack.us/my.php?image=chgpass5ci.jpg

[URL=http://img58.imageshack.us/my.php?image=chgpass5ci.jpg][IMG]http://img58.imageshack.us/img58/9735/chgpass5ci.th.jpg[/IMG][/URL]

(in reply to Parabellum)

Post #: 5

RE: Encode my script - 1/22/2007 8:31:33 AM

Country73

Posts: 735
Score: 10
Status: offline

One more option for you; use AutoIT.
You can either create the whole script with AutoIT, or 'wrap' your vbscript with AutoIT.
AutoIT can create an EXE out of it, you then have the option to password protect your EXE so that even if one of your users has AutoIT they won't be able to open it up without the correct password.

(in reply to avipenina)

Post #: 6

RE: Encode my script - 1/22/2007 8:40:47 AM

Parabellum

Posts: 222
Score: 0
Joined: 11/12/2006
From: UK
Status: offline

If the aim of your script is to cahnge the local admin password on the machines in your domain, there are easy ways of doing so,
in fact many scripts allready exist for doing this exact task, remotely from your server, eliminating the need for logon scripts and so making it more secure..
there are postings on this site relating to this task, or infact..

http://users.pandora.be/mydotcom/program/vbs/modifypw.htm <-------This seems to be a good effort..

I often prefer to create my own scripts, even if one exists to do the same job... (how else do you learn?!)
But my point is... there are better ways of acheiving this... check out some existing code, and make your own version if you wish...

Or I might have just gone completely off point... and this may not be what your trying to acheive anyway :)

< Message edited by Parabellum -- 1/22/2007 8:42:01 AM >

(in reply to avipenina)