forum.vdsworld.com Forum Index forum.vdsworld.com
Visit VDSWORLD.com
 
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 


RunAs Script

 
Post new topic   Reply to topic    forum.vdsworld.com Forum Index -> General Help
View previous topic :: View next topic  
Author Message
dmonckton
Contributor
Contributor


Joined: 09 Aug 2002
Posts: 117
Location: Lewes, U.K.
PostPosted: Wed Oct 18, 2006 11:33 am    Post subject: RunAs Script Reply with quote
Hi All

This is very cheeky but can anyone convert this VB Script to VDS?

Code:

set WshShell = CreateObject("WScript.Shell")
WshShell.Run "runas /user:administrator ""c:test.bat"""
WScript.Sleep 100
WshShell.Sendkeys "password~"


The original article said that the script could be encoded to hide
the password but the encoding was weak and could be hacked.

I want to use the MD5 routine in VDS to tighten up the password
hiding. This would be a great app to have as some of our s/w
requires admin rights to run and we don't want to give our users
full rights to corrupt their PC's!

Thanks

David...

PS. Original Article: http://searchwinit.techtarget.com/tip/0,289483,sid1_gci929880,00.html
Back to top
View user's profile Send private message
Skit3000
Admin Team


Joined: 11 May 2002
Posts: 2166
Location: The Netherlands
PostPosted: Fri Oct 20, 2006 6:35 pm    Post subject: Reply with quote
David, the example you shown is a real bad one. Even if you convert it to VDS, people can still get the password simply by running a keylogger on their system OR by placing a custom RUNAS.EXE program on the computer which will log all input.

There are some other ways to give users Administrator rights by the use of APIs. CodeScript made a good example about it:

http://codescript.vdsworld.com/VDS5src/Impersonate_user.zip
_________________
[ Add autocomplete functionality to your VDS IDE windows! ]
Voor Nederlandse beginners met VDS: bekijk ook eens deze tutorial!
Back to top
View user's profile Send private message
dmonckton
Contributor
Contributor


Joined: 09 Aug 2002
Posts: 117
Location: Lewes, U.K.
PostPosted: Wed Nov 08, 2006 5:46 pm    Post subject: Reply with quote
Thanks for the info, I looked through the code but found it a bit over the
top for what I wanted to do.

Cheers

David...
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic   Reply to topic    forum.vdsworld.com Forum Index -> General Help All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum

Twitter@vdsworld       RSS

Powered by phpBB © 2001, 2005 phpBB Group