At some point the password has to be decoded in a standardized way on any
machine, which makes it retrievable.

There are ways to obscure the password from someone using notepad, but
that's pretty much it. 

Even with obfuscation of the source by putting it in a binary exe,
PowerShell is an interpreted script which makes it even more vulnerable to
simple-reverse engineering.

 

(Anyone else is free to jump in if they want to take issue with any of my
statements)

 

Daniel Wolf

 

From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com]
On Behalf Of Mathieu Kindelberger
Sent: Tuesday, July 22, 2014 10:08 AM
To: scripting@lists.myitforum.com
Subject: [scripting] RE: PowerShell to store password securely in a script?

 

Hi Daniel, 

Maybe you can convert to Exe your powershell file. 

 
<http://www.gunnalag.com/2013/06/04/converting-powershell-script-into-an-exe
cutableapplication/>
http://www.gunnalag.com/2013/06/04/converting-powershell-script-into-an-exec
utableapplication/

 

Best regards 

 

From: listsad...@lists.myitforum.com <mailto:listsad...@lists.myitforum.com>
[mailto:listsad...@lists.myitforum.com] On Behalf Of Daniel Ratliff
Sent: mardi 22 juillet 2014 16:56
To: scripting@lists.myitforum.com <mailto:scripting@lists.myitforum.com> 
Subject: [scripting] PowerShell to store password securely in a script?

 

I feel like I am missing something glaringly obvious here. 

 

I have two requirements: 

1.       Store the password in the script, but not in plain text

2.       Use a single script with nothing external

 

Is there no way with PowerShell to store an encrypted password in a script
and re-use that on multiple machines? 

 

Daniel Ratliff 

 


The information transmitted is intended only for the person or entity to
which it is addressed
and may contain CONFIDENTIAL material. If you receive this
material/information in error,
please contact the sender and delete or destroy the material/information.

 

 



Attachment: smime.p7s
Description: S/MIME cryptographic signature

Reply via email to