http://debianws.lexgopc.com/wiki143/index.php?action=history&feed=atom&title=JScript.EncodeJScript.Encode - Revision history2026-05-13T05:25:38ZRevision history for this page on the wikiMediaWiki 1.43.1http://debianws.lexgopc.com/wiki143/index.php?title=JScript.Encode&diff=4061504&oldid=previmported>Danhash: ce2025-05-29T14:52:57Z<p>ce</p>
<p><b>New page</b></p><div>{{Short description|Javascript encoding method developed by Microsoft}}<br />
'''JScript.Encode''' is a method created by [[Microsoft]] used to [[Obfuscation (software)|obfuscate]] both server and [[Client-side JavaScript]] or [[VB Script]] source code in order to protect the [[source code]] from [[copying]].<ref name=msse>{{cite web|url=http://www.microsoft.com/mind/0899/scriptengine/scriptengine.asp |title=Script Encoding with the Microsoft Script Engine Version 5.0 |date=Aug 1999 |publisher=Microsoft |first=Andrew |last=Clinick |work=Script Engine |url-status=dead |archive-date=2002-12-14 |archive-url=https://web.archive.org/web/20021214024403/http://www.microsoft.com/mind/0899/scriptengine/scriptengine.asp }}</ref> JavaScript code is used for creating [[dynamic web content]] on many websites, with the source code easily viewable, so this was meant to protect the code.<br />
<br />
The encoding is a simple [[polyalphabetic substitution]] using three alphabets.<ref name=vc>{{cite web|url=http://virtualconspiracy.com/content/articles/breaking-screnc |title=Breaking the Windows Script Decoder |website=Virtual Conspiracy |url-status=dead |archive-date=2013-12-08 |archive-url=https://web.archive.org/web/20131208110057/http://virtualconspiracy.com/content/articles/breaking-screnc |quote=<small>Security by obscurity is a bad, bad idea. Instead of encouraging that approach, Microsoft should educate programmers to find other ways to store their passwords and sensitive data, and tell them that an algorithm or any other piece of code that needs to be 'hidden', is just bad design</small> }}</ref><br />
<br />
==How to use==<br />
A [[command line]] script encoder can be used to encode scripts.<ref name=msse /><ref>{{cite web|url=http://www.microsoft.com/mind/0899/code/Clinick0899.exe |title=Clinick0899.exe |format=program |date=Aug 1999 |publisher=Microsoft |first=Andrew |last=Clinick |url-status=dead |archive-date=2002-12-14 |archive-url=https://web.archive.org/web/20021214024403/http://www.microsoft.com/mind/0899/code/Clinick0899.exe |quote=<small>The command-line script encoder (screnc.exe) provides a simple mechanism for encoding HTML, ASP, SCT, VBScript, and JScript files. The Microsoft Script group developed it as an easy-to-use command-line tool that can be easily built into your existing deployment batch files</small> }}</ref> To encode a [[HTML]] web-page file called {{mono|default.htm}}, use the following command:<br />
<br />
<pre><br />
screnc.exe default.htm defaultenc.htm<br />
</pre><br />
<br />
It would output to a file called {{mono|defaultenc.htm}}.<br />
<br />
==Weaknesses==<br />
It has been [[Reverse engineering|reverse engineered]]<ref name=vc /> and many websites provide an on-the-fly decoder.<ref>{{cite web |url= https://gist.github.com/bcse/1834878 |date= Feb 15, 2012 |title= Windows Script Decoder |first= Grey |last= Lee |website= GitHub |quote= Decoding <code>JScript.Encoded</code> }}</ref><br />
<br />
==References==<br />
{{reflist}}<br />
<br />
==External links==<br />
* [https://gist.github.com/bcse/1834878 Windows Script Decoder]<br />
<br />
[[Category:Internet Explorer]]<br />
<br />
{{windows-stub}}</div>imported>Danhash