JScript.Encode
Appearance
JScript.Encode is a method created by Microsoft used to encode both server and Client-side JavaScript or VB Script source code in order to protect the source code from copying.[1] JavaScript code is used for creating dynamic web content on many websites, with the source code easily viewable, so this was meant to protect the code.
The encoding is a simple polyalphabetic substitution using three alphabets.
How to use
You can use a command line script encoder to encode your scripts. [2][3] To encode a HTML web-page file called default.htm, use the following command:
screnc.exe default.htm defaultenc.htm
It would output to a file called defaultenc.htm.
Weaknesses
It has been reverse engineered [4] and many websites provide an on-the-fly decoder.[5]
References
- ^ Script Encoding with the Microsoft Script Engine Version 5.0
- ^ Clinick, Andrew (Aug 1999). "Script Encoding with the Microsoft Script Engine Version 5.0". Script Engine. Microsoft. Archived from the original on Dec 14, 2002.
{{cite web}}
: Unknown parameter|deadurl=
ignored (|url-status=
suggested) (help) - ^ Clinick, Andrew (Aug 1999). "Clinick0899.exe". Microsoft. Archived from the original (program) on Dec 14, 2002.
The command-line script encoder (screnc.exe) provides a simple mechanism for encoding HTML, ASP, SCT, VBScript, and JScript files. The Microsoft Script group developed it as an easy-to-use command-line tool that can be easily built into your existing deployment batch files
{{cite web}}
: Unknown parameter|deadurl=
ignored (|url-status=
suggested) (help) - ^ Breaking the Windows Script Decoder
- ^ Windows Script Decoder