Menu
Home Explore People Places Arts History Plants & Animals Science Life & Culture Technology
On this page
JScript.Encode
Javascript encoding method developed by Microsoft

JScript.Encode is a method created by Microsoft used to encode both server and Client-side JavaScript or VB Script source code in order to protect the source code from copying. JavaScript code is used for creating dynamic web content on many websites, with the source code easily viewable, so this was meant to protect the code.

The encoding is a simple polyalphabetic substitution using three alphabets.

We don't have any images related to JScript.Encode yet.
We don't have any YouTube videos related to JScript.Encode yet.
We don't have any PDF documents related to JScript.Encode yet.
We don't have any Books related to JScript.Encode yet.
We don't have any archived web articles related to JScript.Encode yet.

How to use

You can use a command line script encoder to encode your scripts.34 To encode a HTML web-page file called default.htm, use the following command:

screnc.exe default.htm defaultenc.htm

It would output to a file called defaultenc.htm.

Weaknesses

It has been reverse engineered5 and many websites provide an on-the-fly decoder.6

References

  1. Clinick, Andrew (Aug 1999). "Script Encoding with the Microsoft Script Engine Version 5.0". Script Engine. Microsoft. Archived from the original on 2002-12-14. https://web.archive.org/web/20021214024403/http://www.microsoft.com/mind/0899/scriptengine/scriptengine.asp ↩

  2. "Breaking the Windows Script Decoder". Virtual Conspiracy. Archived from the original on 2013-12-08. Security by obscurity is a bad, bad idea. Instead of encouraging that approach, Microsoft should educate programmers to find other ways to store their passwords and sensitive data, and tell them that an algorithm or any other piece of code that needs to be 'hidden', is just bad design https://web.archive.org/web/20131208110057/http://virtualconspiracy.com/content/articles/breaking-screnc ↩

  3. Clinick, Andrew (Aug 1999). "Script Encoding with the Microsoft Script Engine Version 5.0". Script Engine. Microsoft. Archived from the original on 2002-12-14. https://web.archive.org/web/20021214024403/http://www.microsoft.com/mind/0899/scriptengine/scriptengine.asp ↩

  4. Clinick, Andrew (Aug 1999). "Clinick0899.exe". Microsoft. Archived from the original (program) on 2002-12-14. The command-line script encoder (screnc.exe) provides a simple mechanism for encoding HTML, ASP, SCT, VBScript, and JScript files. The Microsoft Script group developed it as an easy-to-use command-line tool that can be easily built into your existing deployment batch files https://web.archive.org/web/20021214024403/http://www.microsoft.com/mind/0899/code/Clinick0899.exe ↩

  5. "Breaking the Windows Script Decoder". Virtual Conspiracy. Archived from the original on 2013-12-08. Security by obscurity is a bad, bad idea. Instead of encouraging that approach, Microsoft should educate programmers to find other ways to store their passwords and sensitive data, and tell them that an algorithm or any other piece of code that needs to be 'hidden', is just bad design https://web.archive.org/web/20131208110057/http://virtualconspiracy.com/content/articles/breaking-screnc ↩

  6. Lee, Grey (Feb 15, 2012). "Windows Script Decoder". GitHub. Decoding JScript.Encoded https://gist.github.com/bcse/1834878 ↩