Page 1 of 2 12>
Topic Options
#72082 - 2002-12-06 09:33 AM Wkixcrypt & console
MightyR1 Offline
MM club member
*****

Registered: 1999-09-09
Posts: 1264
Loc: The Netherlands
Richard / Buddies,

I use the following to make me a crypted.exe
code:
wkixcrypt tst.vbs -m "" -k -c "cscript.exe %s //b //nologo"

Running it still gives me a short console window... [Frown]

Can this be prevented???
_________________________
Greetz,
Patrick Rutten

- We'll either find a way or make one...
- Knowledge is power; knowing how to find it is more powerful...
- Problems don't exist; they are challenges...

Top
#72083 - 2002-12-09 12:03 AM Re: Wkixcrypt & console
MightyR1 Offline
MM club member
*****

Registered: 1999-09-09
Posts: 1264
Loc: The Netherlands
* BUMP *

No one???
_________________________
Greetz,
Patrick Rutten

- We'll either find a way or make one...
- Knowledge is power; knowing how to find it is more powerful...
- Problems don't exist; they are challenges...

Top
#72084 - 2002-12-09 12:05 AM Re: Wkixcrypt & console
Lonkero Administrator Offline
KiX Master Guru
*****

Registered: 2001-06-05
Posts: 22346
Loc: OK
.vbs?

if you run a simple script with it...

eh, where I can get it?
want to test myself...
_________________________
!

download KiXnet

Top
#72085 - 2002-12-09 12:16 AM Re: Wkixcrypt & console
Lonkero Administrator Offline
KiX Master Guru
*****

Registered: 2001-06-05
Posts: 22346
Loc: OK
ok, got the file...
testing.
_________________________
!

download KiXnet

Top
#72086 - 2002-12-09 12:17 AM Re: Wkixcrypt & console
MightyR1 Offline
MM club member
*****

Registered: 1999-09-09
Posts: 1264
Loc: The Netherlands
Is at work, will PM it to you...

{edit - ignore previous line, thought the vbs is what Lonk wanted}

Why vbs and not KiX I hear you thinking??? Well I want to "test" a fellow scripter. He is using NTFS streams and vbs to hide SU password and I'd like to see if he can discover the code in the vbs. If not found, then next goal is to switch him to KiX...

[ 09. December 2002, 00:20: Message edited by: MightyR1 ]
_________________________
Greetz,
Patrick Rutten

- We'll either find a way or make one...
- Knowledge is power; knowing how to find it is more powerful...
- Problems don't exist; they are challenges...

Top
#72087 - 2002-12-09 12:21 AM Re: Wkixcrypt & console
Lonkero Administrator Offline
KiX Master Guru
*****

Registered: 2001-06-05
Posts: 22346
Loc: OK
if you want to hide password, you could check rot13 from the UDFs and then run that with crypter.kix (somewhere on the board) and after that it will be cryptic.
still little bit more with kixcrypt.
this will cause it to be about 500 bit crypted and with proper de-crypters it takes a minute to translate [Razz]
_________________________
!

download KiXnet

Top
#72088 - 2002-12-09 12:24 AM Re: Wkixcrypt & console
MightyR1 Offline
MM club member
*****

Registered: 1999-09-09
Posts: 1264
Loc: The Netherlands
Knew about the ROT13,

WKiXcrypt has also the advantage of making the .KiX an exe (as long as KiX is somewhere within your reach)

{edit - Post count was 567, does this count for any status like the M club???}

[ 09. December 2002, 00:26: Message edited by: MightyR1 ]
_________________________
Greetz,
Patrick Rutten

- We'll either find a way or make one...
- Knowledge is power; knowing how to find it is more powerful...
- Problems don't exist; they are challenges...

Top
#72089 - 2002-12-09 12:25 AM Re: Wkixcrypt & console
Lonkero Administrator Offline
KiX Master Guru
*****

Registered: 2001-06-05
Posts: 22346
Loc: OK
but did you know about crypter?
_________________________
!

download KiXnet

Top
#72090 - 2002-12-09 12:26 AM Re: Wkixcrypt & console
MightyR1 Offline
MM club member
*****

Registered: 1999-09-09
Posts: 1264
Loc: The Netherlands
Nope,

will search
_________________________
Greetz,
Patrick Rutten

- We'll either find a way or make one...
- Knowledge is power; knowing how to find it is more powerful...
- Problems don't exist; they are challenges...

Top
#72091 - 2002-12-09 12:32 AM Re: Wkixcrypt & console
Lonkero Administrator Offline
KiX Master Guru
*****

Registered: 2001-06-05
Posts: 22346
Loc: OK
huh, he calls kix KixTart...
have to teach. couldn't get it to work at all yet with his help, trying.

there should be real help in packaged.
MCA, your site has all links to wkixcrpt.exe but not any help on it.
nor has the file itself.
_________________________
!

download KiXnet

Top
#72092 - 2002-12-09 12:35 AM Re: Wkixcrypt & console
Lonkero Administrator Offline
KiX Master Guru
*****

Registered: 2001-06-05
Posts: 22346
Loc: OK
ok, actually if his info:
quote:
The encryption is a very simple XOR routine so hopefully I will still be able to travel outside the UK without fear of arrest :-o

is correct, the crypter kix is 100% more affective than kixcrypt.
_________________________
!

download KiXnet

Top
#72093 - 2002-12-09 12:35 AM Re: Wkixcrypt & console
MightyR1 Offline
MM club member
*****

Registered: 1999-09-09
Posts: 1264
Loc: The Netherlands
Dl the kixcript.exe and run it... I think Wkixcrypt = Kixcrypt without console (as was told by Richard in his release post)
_________________________
Greetz,
Patrick Rutten

- We'll either find a way or make one...
- Knowledge is power; knowing how to find it is more powerful...
- Problems don't exist; they are challenges...

Top
#72094 - 2002-12-09 12:37 AM Re: Wkixcrypt & console
Lonkero Administrator Offline
KiX Master Guru
*****

Registered: 2001-06-05
Posts: 22346
Loc: OK
eh, the wkixcrypt does not run at all...
where is his post?

it might just be that his documentation on his site is lacking something.
_________________________
!

download KiXnet

Top
#72095 - 2002-12-09 12:38 AM Re: Wkixcrypt & console
MightyR1 Offline
MM club member
*****

Registered: 1999-09-09
Posts: 1264
Loc: The Netherlands
Found the Crypter, looks great...

Challenge: how to prevent users from running / reading the crypter.kix and thus being able to see the algoritme used???
_________________________
Greetz,
Patrick Rutten

- We'll either find a way or make one...
- Knowledge is power; knowing how to find it is more powerful...
- Problems don't exist; they are challenges...

Top
#72096 - 2002-12-09 12:40 AM Re: Wkixcrypt & console
MightyR1 Offline
MM club member
*****

Registered: 1999-09-09
Posts: 1264
Loc: The Netherlands
the only updated docu I found is the one on the BB --> http://www.kixtart.org/cgi-bin/ultimatebb.cgi?ubb=get_topic;f=2;t=002560
_________________________
Greetz,
Patrick Rutten

- We'll either find a way or make one...
- Knowledge is power; knowing how to find it is more powerful...
- Problems don't exist; they are challenges...

Top
#72097 - 2002-12-09 12:41 AM Re: Wkixcrypt & console
Lonkero Administrator Offline
KiX Master Guru
*****

Registered: 2001-06-05
Posts: 22346
Loc: OK
make it exe?
anyway, if they see the algorithm, they might just not be smart enought to understand it [Wink]
_________________________
!

download KiXnet

Top
#72098 - 2002-12-09 12:45 AM Re: Wkixcrypt & console
MightyR1 Offline
MM club member
*****

Registered: 1999-09-09
Posts: 1264
Loc: The Netherlands
Agreed...

so use crypter to make a secure KiX and make it exe with KiXcrypt...

Now to give him WKIX32.exe without letting him know... (IEXPRESS)

Well enough data to play with. Gotta go now (me sleepy...)
_________________________
Greetz,
Patrick Rutten

- We'll either find a way or make one...
- Knowledge is power; knowing how to find it is more powerful...
- Problems don't exist; they are challenges...

Top
#72099 - 2002-12-09 12:51 AM Re: Wkixcrypt & console
Lonkero Administrator Offline
KiX Master Guru
*****

Registered: 2001-06-05
Posts: 22346
Loc: OK
pat, sorry.
not sure what is wrong, but can't make it run at all.
maybe it's because my script is kixweeper (kixmine) which is basic example of wkix-script.

so, seems that there is some little problem in his wkixcrypt.

if you use the crypt.kix and want it to be for wkix I quess the wkixcrypt is no option.
using self-executing packager, like winrar or some console rar/arj/zip tool...
_________________________
!

download KiXnet

Top
#72100 - 2002-12-09 01:22 AM Re: Wkixcrypt & console
MCA Offline
KiX Supporter
*****

Registered: 2000-04-28
Posts: 5152
Loc: Netherlands, EU
Dear,

Richard had make a lot of replies to other topics. Only the F2-2560 topic contains
the most general information without a FAQ section. In other topics Richard
explains "how it is working" and "what is and isn't possible". Special problems
he had with the wkixcrypt part, which wasn't a specific kixcrypt problem,
but a windows API problem.

Also we had ask Richard to create a document of it. At this moment he ask other guys
to make some effort for it.

Later this month we will try to collect all feedback from Richard in other topics
and we try to present them in a nice format to you.
greetings.
_________________________
email scripting@wanadoo.nl homepage scripting@wanadoo.nl | Links | Summary of Site Site KiXforms FAQ kixtart.org library collection mirror MCA | FAQ & UDF help file UDF kixtart.org library collection mirror MCA | mirror USA | mirror europe UDF scriptlogic library collection UDFs | mirror MCA

Top
#72101 - 2002-12-10 12:44 AM Re: Wkixcrypt & console
Richard H. Administrator Offline
Administrator
*****

Registered: 2000-01-24
Posts: 4946
Loc: Leatherhead, Surrey, UK
quote:
ok, actually if his info:

quote:
--------------------------------------------------------------------------------
The encryption is a very simple XOR routine so hopefully I will still be able to travel outside the UK without fear of arrest :-o

--------------------------------------------------------------------------------

is correct, the crypter kix is 100% more affective than kixcrypt.

Phew, just back from vacation and KiXcrypt queries all over the place.

I'm not going to go into a lot of detail about the encryption used in KiXcrypt as any clue will make the encryption easier to break.

The quote above is a little out of date and a little out of context - I don't recall which version of KiXcrypt it applies to.

The basic encryption process remains a simple character-for-character method and the XOR is the base method applied to all characters which are encrypted. However the both the algorithm and additional techniques used are sufficiently complex to make it hard to break. It is not absolutely secure because:
  • I'm no security guru.
  • It has to be two-way, i.e. unencryptable. More secure (one-way) encryption is fine for passwords but makes a script hard to execute.
  • It's purpose is to deter users from browsing for passwords or security exploits which may be present in your scripts. It should not under any circumstances be used to secure nuclear warhead activation codes.
From memory, the main features of the encryption technique are:
  • The seed is either a password supplied when encrypting the file, or where no password is supplied then a random password of random length is generated. The only difference between the two methods is that a random password is embedded into the encrypted file so that it can be automatically unencrypted, and a user supplied password is not - it has to be supplied as a parameter to unencrypt the file.
    The seed is used both as a start point for the encryption algorithm and also to control it's process. A long password with a good selection of characters will make the encryption less predictable.
  • All 256 possible byte values are accepted from the source file and used in the encrypted file. This means that any type of file including binary (Word, Excel, EXE) may be encrypted.
  • The "XOR" encryption character is taken from a number of "one-time-pads". This means that each character which is encrypted from the source file has a unique character to encrypt.
  • The one-time-pad used is selected by algorithm, and the pads are switched frequently.
  • The character position in the one time pad is also based on an algorithm, they are not used sequentially, so even knowledge of the values of the one-time-pads would not allow you to decrypt the file.
  • There are a further 3 additional methods used to peturb the encryption to make it harder to break. Some, all or none of these may be combined on each character during the encryption process and include:
    Rotate higher and lower nibbles (4 bits).
    Switch odd and even bits.
    Skip a number of iterations of the algorithm (self modifying algorithm).
    The decision on whether to use any of these "salts" is of course based on the algorithm.
Hopefully that will reassure anyone who was worried that the encryption technique might be too simple [Wink]

Top
Page 1 of 2 12>


Moderator:  Glenn Barnas, NTDOC, Arend_, Jochen, Radimus, Allen, ShaneEP, Ruud van Velsen, Mart 
Hop to:
Shout Box

Who's Online
0 registered and 657 anonymous users online.
Newest Members
M_Moore, BeeEm, min_seow, Audio, Hoschi
17883 Registered Users

Generated in 0.147 seconds in which 0.109 seconds were spent on a total of 13 queries. Zlib compression enabled.

Search the board with:
superb Board Search
or try with google:
Google
Web kixtart.org