#98121 - 2003-01-29 05:19 PM
Re: UTILITY: KiXcrypt 2.16b - KiXtart encryption
|
Anonymous
Anonymous
Unregistered
|
ok... It might just be me who just don't get this.. I'm in a big need for a way to encrypt my scripts. The utility have to work that so that my global variables and functions are fully operationel thru all the scripts.
I've tried the crypter.kix by Lonkero, which i modified to operate as a function (and then i made this script crypted with Kixcrypt.exe), and this worked out fine until the big if/endif statements (and actually some loop statements and so on). So.. Now i'm (by advise from Lonkero) am looking more into KixCrypt..
What seems to be my problem here is to keep the variables and functions all the way thru the 10-30 scripts i have.
Any suggestions how to solve this ? Someone must have done this before ?
-Tommy
|
|
Top
|
|
|
|
#98122 - 2003-01-30 09:43 AM
Re: UTILITY: KiXcrypt 2.16b - KiXtart encryption
|
Richard H.
Administrator
Registered: 2000-01-24
Posts: 4946
Loc: Leatherhead, Surrey, UK
|
I've very recently added new features to KiXcrypt so that you can include scripts made up of more than one file.
I strongly suggest that you use the GUI interface to generate you encrypted script. The reason is that the command line can end up very long, and you cannot type it all in (on Win95 anyway).
When you run the script, the files are all unencrypted and execute as if they were run normally. The only differences are:
- The main script has a random file name. Keep all your secure information in the main script.
- The main script is deleted as soon as it starts, so it is not re-entrant. The additional scripts are not deleted until the main script has finished executing.
Assuming that your main script it called "Master.kix" and your additional scripts are "Groups.kix", "Printers.kix", "Shares.kix" and "Functions.kix" the GUI will look like this:
Hit the "Execute Command" button and it will create a "crypted.exe".
You can find a link to the GUI code (and the script itself if you want to cut'n'paste) on page 3 of this thread.
|
|
Top
|
|
|
|
|
#98124 - 2003-01-30 09:48 AM
Re: UTILITY: KiXcrypt 2.16b - KiXtart encryption
|
Richard H.
Administrator
Registered: 2000-01-24
Posts: 4946
Loc: Leatherhead, Surrey, UK
|
Err, yeah. I believe I just said that ![[Confused]](images/icons/confused.gif)
|
|
Top
|
|
|
|
#98126 - 2003-01-30 09:54 AM
Re: UTILITY: KiXcrypt 2.16b - KiXtart encryption
|
Anonymous
Anonymous
Unregistered
|
Most greatfull... Will try this...
Thanks a lot...
-Tommy
|
|
Top
|
|
|
|
|
#98127 - 2003-01-31 10:19 AM
Re: UTILITY: KiXcrypt 2.16b - KiXtart encryption
|
Anonymous
Anonymous
Unregistered
|
first of all... This utility did exactly what i needed.. Thanks a lot ![[Smile]](images/icons/smile.gif)
Then i still have a question.. It seems to me that the .exe decrypt/unpack the files into the dir where the .exe was first started.. This is not good. Then i read that, There is now a "-t path" option when you decrypt which will create the temporary file in "path", post on the original post.
This -t option i cant fint documented, neither can i make it happend...
Any suggestions ?
-T
[ 31. January 2003, 10:20: Message edited by: X-mine ]
|
|
Top
|
|
|
|
|
#98128 - 2003-01-31 10:46 AM
Re: UTILITY: KiXcrypt 2.16b - KiXtart encryption
|
Richard H.
Administrator
Registered: 2000-01-24
Posts: 4946
Loc: Leatherhead, Surrey, UK
|
Thanks for the feedback
The "-t" option only applies when you decrypt the file.
To decrypt to a different directory:
code:
crypted.exe -t c:\windows\temp
or even
code:
crypted.exe -t %TEMP%
|
|
Top
|
|
|
|
|
#98129 - 2003-01-31 11:01 AM
Re: UTILITY: KiXcrypt 2.16b - KiXtart encryption
|
Anonymous
Anonymous
Unregistered
|
hmm.. ok.. thanks..
That would make it possible for someone to add this option and then get all the svcriptfiles from the optional directory.?.?
Any workarounds for this ? What im looking for is a way to make it at hard as possible to get the script files.. Today i have some scripts running into a sort of menu. Then the menu waits for userinput before continuing. In this "break" the user would then be able to get the files from the specified directory..
Any suggestions about how to solve this ?
-T
|
|
Top
|
|
|
|
#98130 - 2003-01-31 11:57 AM
Re: UTILITY: KiXcrypt 2.16b - KiXtart encryption
|
Richard H.
Administrator
Registered: 2000-01-24
Posts: 4946
Loc: Leatherhead, Surrey, UK
|
How would that help?
If the user can access the crypted.exe to execute it then they can copy it and execute anywhere, so denying the "-t" option won't make it any more secure.
Hard-coding the directory into the crypted.exe may be possible, but you will have to convince me that it will provide an additional useful deterrent.
You could force the files to be created on a hidden share on a server, but that is so easy to circumvent that it is pointless. All that it does is to give a false sense of security.
The problem is a balance. A malignant user with sufficient know-how to break through the other security devices won't be at all deterred by the files being written to a hard-coded directory path. The sort of user who will be deterred by a hard-coded directory path will already have been put off by the existing features.
You need your additional scripts to remain in place, because at some point you will want to CALL or otherwise execute them. If they are deleted before you call them it is going to seriously hamper the functionality of your script ![[Wink]](images/icons/wink.gif)
There are two things that you can do to increase security:
- Put any security sensitive code in the primary script. This script is recreated with a random name to make it hard to catch, and is immediately deleted when it is started. The script is deleted even if you are paused at an input prompt.
- Create all extra code in your additional scripts as functions. This allows you to CALL your additional script as the very first action of your main script. Once each has been called it you can delete it. The functions are loaded in memory, so you can call the functions later on in your scripts even though the original source files no longer exist.
Remember, with any of the encrypting solutions available for KiXtart that the purpose is to make it hard enough for someone to get access that it is not worth their while. At some point the script has to be available in it's original form because that is the only way that KiXtart can interperet it.
|
|
Top
|
|
|
|
|
#98131 - 2003-02-01 12:20 AM
Re: UTILITY: KiXcrypt 2.16b - KiXtart encryption
|
Anonymous
Anonymous
Unregistered
|
hmmm.. ok.. thanks.. i agree with the arguments, but it would be nice to have the possibility to set the decrypt path (and block the -t option) anyway.. This way i could atleast (maybe) get the feeling that they are a little more secure..
But.. I'll go through the scripts and see if i can do something like you suggested...
-T
|
|
Top
|
|
|
|
|
#98133 - 2003-01-31 07:49 PM
Re: UTILITY: KiXcrypt 2.16b - KiXtart encryption
|
Frank Buzin
Fresh Scripter
Registered: 2002-01-17
Posts: 5
|
quote:
The console thing. This comes up a lot, and I really don't have the answer
A crypted.exe created with "wkxcrypt" does not create a console when it it executed. Unfortunately, the "system()" call that I use to execute the unencrypted script does create a console.
Can you use CreateProcess() instead of system() and make sure there is no creation flag for new console?
FB
[ 31. January 2003, 19:50: Message edited by: Frank Buzin ]
|
|
Top
|
|
|
|
#98135 - 2003-02-03 04:22 PM
Re: UTILITY: KiXcrypt 2.16b - KiXtart encryption
|
Richard H.
Administrator
Registered: 2000-01-24
Posts: 4946
Loc: Leatherhead, Surrey, UK
|
Frank,
Many thanks for that pointer - initial simple testing shows some good results.
I'll try to incorporate it into KiXcrypt and get a new release out over the next couple of weeks.
I think that I'll start a new thread though, this ones getting a bit unwieldly.
I knew if I kept asking someone would have the answer
|
|
Top
|
|
|
|
|
#98136 - 2003-02-17 04:25 AM
Re: UTILITY: KiXcrypt 2.16b - KiXtart encryption
|
MCA
KiX Supporter
Registered: 2000-04-28
Posts: 5152
Loc: Netherlands, EU
|
Dear,
On our site pages Home - Kix Tools or Summary of Site you find now two ZIP files.
kixcrypt216b.zip which includes kixcrypt.exe & wkixcrypt.exe
kixcrypt300b.zip which includes kcgen.kix, kixcrypt.doc, kixcrypt.exe & wkixcrypt.exe
greetings.
|
|
Top
|
|
|
|
Moderator: Arend_, Allen, Jochen, Radimus, Glenn Barnas, ShaneEP, Ruud van Velsen, Mart
|
0 registered
and 194 anonymous users online.
|
|
|
![[Razz]](images/icons/tongue.gif){kind=icon}
