Jump to content

JScript.Encode

From Wikipedia, the free encyclopedia
This is an old revision of this page, as edited by WurmWoode (talk | contribs) at 00:33, 12 July 2016 (How to use: cite). The present address (URL) is a permanent link to this revision, which may differ significantly from the current revision.

JScript.Encode is a method created by Microsoft used to encode both server and Client-side JavaScript or VB Script source code in order to protect the source code from copying.[1] JavaScript code is used for creating dynamic web content on many websites, with the source code easily viewable, so this was meant to protect the code.

The encoding is a simple polyalphabetic substitution using three alphabets.

How to use

You can use a command line script encoder to encode your scripts. [2][3] To encode a HTML web-page file called default.htm, use the following command:

screnc.exe default.htm defaultenc.htm

It would output to a file called defaultenc.htm.

Weaknesses

It has been reverse engineered [4] and many websites provide an on-the-fly decoder.[5]

References

  1. ^ Script Encoding with the Microsoft Script Engine Version 5.0
  2. ^ Clinick, Andrew (Aug 1999). "Script Encoding with the Microsoft Script Engine Version 5.0". Script Engine. Microsoft. Archived from the original on Dec 14, 2002. {{cite web}}: Unknown parameter |deadurl= ignored (|url-status= suggested) (help)
  3. ^ Clinick, Andrew (Aug 1999). "Clinick0899.exe". Microsoft. Archived from the original (program) on Dec 14, 2002. The command-line script encoder (screnc.exe) provides a simple mechanism for encoding HTML, ASP, SCT, VBScript, and JScript files. The Microsoft Script group developed it as an easy-to-use command-line tool that can be easily built into your existing deployment batch files {{cite web}}: Unknown parameter |deadurl= ignored (|url-status= suggested) (help)
  4. ^ Breaking the Windows Script Decoder
  5. ^ Windows Script Decoder