Online Script Decoder

From: GreyMagic Security (security_at_GREYMAGIC.COM)
Date: 12/07/04

  • Next message: Alexander Fichman: "Sharepoint 2003 installation fails and account password revealed in setup log" 
    Date:         Tue, 7 Dec 2004 19:13:30 +0200
To: NTBUGTRAQ@LISTSERV.NTBUGTRAQ.COM

    Windows Script Encoder is a Microsoft tool to encode scripts so that "Web
    hosts and Web clients cannot view or modify their source". It encodes the
    content of script tags using a very simple encoding algorithm and renames
    the scripts "language" attribute from "JScript" or "Javascript" to
    "JScript.Encode" and from "VBScript" to "VBScript.Encode".

    The online script decoder decodes scripts that were encoded with the
    Microsoft Script Encoder (screnc.exe) from
    http://www.microsoft.com/downloads/details.aspx?familyid=E7877F67-C447-4873-
    B1B0-21F0626A6329&displaylang=en.

    Recently, malicious attackers have started to use the Microsoft Script
    Encoder in order to evade Anti-virus programs that rely on text-matching for
    virus detection. Such encoded scripts also prevent advanced users from
    immediately seeing that a script may be trying to exploit a vulnerability in
    their browser.

    Use this online decoding tool to quickly and automatically reveal the actual
    code of any encoded pages and scripts. You can paste an entire page
    containing any number of encoded sections or simply provide an encoded page
    URL.

    http://www.greymagic.com/security/tools/decoder/ 

    --
Editor's Note: The 43rd Most Powerful Person in Networking says...
Register today to take the TruSecure ICSA exam by 12/31/04  at
<http://www.2test.com> ,  use promo code "CT1204" and you will pay just
$221.25 US Dollars for domestic exam delivery and  $296.25 US Dollars
for international delivery.
Visit <https://ticsa.trusecure.com>  for complete details regarding the
TICSA credential and to take the free sample exam.
--
  • Next message: Alexander Fichman: "Sharepoint 2003 installation fails and account password revealed in setup log"

    Relevant Pages

    • Re: vbscript encoder
      ... use the MS script encoder ... could someone recommend good vbscript encoder? ... Not clear where need reside html document - in any folder, ...
      (microsoft.public.scripting.vbscript)
    • RE: ASF-WRITER FREEZE WITH SCRIPT 24x7
      ... A script stream is injected to the multiplex every 200ms - containing HTML ... 'occasionally', an encoder will ... It's not enough to slow down or stop the script data injection; ... encoder graphs that we are now using. ...
      (microsoft.public.win32.programmer.mmedia)
    • RE: ASF-WRITER FREEZE WITH SCRIPT 24x7
      ... I've had what might be a similar problem with an encoding application I wrote ... A script stream is injected to the multiplex every 200ms - containing HTML ... 'occasionally', an encoder will ... It's not enough to slow down or stop the script data injection; ...
      (microsoft.public.win32.programmer.mmedia)
    • [Full-Disclosure] Online Script Decoder
      ... Windows Script Encoder is a Microsoft tool to encode scripts so that "Web ... hosts and Web clients cannot view or modify their source". ...
      (Full-Disclosure)
    • Online Script Decoder
      ... Windows Script Encoder is a Microsoft tool to encode scripts so that "Web ... hosts and Web clients cannot view or modify their source". ...
      (Bugtraq)