China DOS Union

How to store passwords encrypted for calling during batch processing?

[ Last edited by uiopuiop on 2011-1-10 at 23:58 ]

What are the password rules? Pure numbers? Numbers plus letters? Or common characters? What are the requirements for the encryption algorithm? Where is the storage location specified? In the registry or a file?

I wrote a simple one, the password requirement is pure numbers, saved in the registry:

@echo off&setlocal enabledelayedexpansion

set x0=!random!!random!!random!!random!!random!&echo !x0! original

set r=hkcu\Software\hanye



:x1: encryption algorithm

if not "!x0:~%n%,1!"=="" set/a a=!x0:~%n%,1!+!n:~-1!,n+=1&set x1=!x1!!a:~-1!&goto:x1

echo %x1% encrypted

reg add %r% /ve /d %x1% /f>nul



for /f "tokens=3 delims=这里是制符" %%a in ('reg query %r% /ve') do set x3=%%a

:x2: decryption algorithm

if not "!x3:~%m%,1!"=="" set/a a=1!x3:~%m%,1!-!m:~-1!,m+=1&set x2=!x2!!a:~-1!&goto:x2

echo %x2% decrypted



pause

reg delete %r% /f>nul

[ Last edited by Hanyeguxing on 2011-1-11 at 01:54 ]

Originally posted by Hanyeguxing at 2011-1-11 12:35 AM:
What are the password rules? Pure numbers? Numbers plus letters? Or common characters?
What are the requirements for the encryption algorithm?
Where is the storage location specified? In the registry or in a file?

re: What are the password rules? - A mix of letters and numbers (of course, it would be better if special symbols can be included)
re: What are the requirements for the encryption algorithm? - Generally, it should be not easy to crack. Of course, if a more advanced encryption can be used (MD5, DSA, RSA, etc.)

re; Where is the storage location specified? It is best to store it in a file.

Batch processing can call third-party command-line tools.

PS. Can you explain the encryption principle of the code on the third floor, thank you!

Add more, remove the if...

The written bat code, most of the core operations rely on the password.

Then encrypt the password with MD5 and compare it in the bat. If correct, execute...

So if you see your bat source code, if there is no comparison, a random password is not acceptable.

set password=
if md5(password)=fde3494783dfd854

The core part of the operation is all related to %password%, some character in the middle, some character is re-operated and deformed...

Only when there is no correct password and skip the judgment and execute next can it not work.

Originally posted by slore at 2011-1-12 01:43 PM:
Add more, cancel the if...

The written bat code, most core operations depend on the password.

Then encrypt the password with MD5 and compare it in the bat. If it is correct, execute...

So seeing your...

Generally, automated scripts run automatically without manual intervention, so there can be no manual input of the password.
After you encrypt with MD5, how do you decrypt it? The password must be in plain text when the batch processing runs. When running, it must be decrypted and then passed to the corresponding command. MD5 cannot recognize it.

Great! I'm a newbie! So I can only watch and can't contribute much.

Originally posted by uiopuiop at 2011-1-12 23:37:


Most automated scripts run automatically without manual intervention, so passwords cannot be entered manually.
After you encrypt with MD5, how do you decrypt it? The password must be in plain text when the batch file runs. It must be decrypted and then passed to the corresponding command during execution. MD5 can't recognize it.

You don't set a password if you want no intervention...


Here, plain text is entered using set /p pw=

Then calculate MD5 and compare it with the MD5... There is a relationship with the password you entered through the following operations, so an incorrect password cannot be used.


If you simply set a password and just read it automatically? Automatically judge...
If you comment out the judgment, what encryption do you have?

I'm quite green, not very familiar with code. But I can see that slore's thinking is relatively rigorous.

Do you all have any new ideas?

Simple, just replace the text. For example, replace "1" with "X" to make it unreadable, and then replace it back when calling.

1、Write the simplest int main(int argc, char * argv[]) program in C. char * argv[] is the first parameter. The program will check the first parameter (which is the password). If successful, return T; if failed, return F.
2、In batch processing, make a SE /P PWD= to require entering the password, and then pass the input value to the program in the first step as the parameter, which is the password, and make a judgment.
3、The batch processing judges whether the input password is correct according to the %errorlevel% return value T/F. If correct, handle the next step; if incorrect, prompt to enter again.
4、In this way, the password is saved in the compiled exe file, generally not visible, unless cracked.