Sign in to follow this  
Followers 0
adam

Idea on how to obfuscate a password?

7 posts in this topic

I play a game and have tons of accounts each one has a different 100+ bit password. Ive made a script that detects what the login is and then selects the password field and chooses the correct password. I've made it do this by copying the password to the clipboard and then pasting it and i'm less than pleased with the security of this setup.

Is it safer to have the password be typed in by autoit, typing it in through some simulated keyboard or is there a way to obsfucate the whole process? If not are there any ideas on how I can increase protection from potential keyloggers?

Share this post


Link to post
Share on other sites



KeePass/KeyForm might be the right for you.


My UDFs and Tutorials:

Spoiler

UDFs:
Active Directory (NEW 2017-04-18 - Version 1.4.8.0) - Download - General Help & Support - Example Scripts - Wiki
OutlookEX (NEW 2017-02-27 - Version 1.3.1.0) - Download - General Help & Support - Example Scripts - Wiki
ExcelChart (2015-04-01 - Version 0.4.0.0) - Download - General Help & Support - Example Scripts
Excel - Example Scripts - Wiki
Word - Wiki
PowerPoint (2015-06-06 - Version 0.0.5.0) - Download - General Help & Support

Tutorials:
ADO - Wiki

 

Share this post


Link to post
Share on other sites

@water: I think he want's to stay with his script but he isn't pleased with the security of typing the password through the clipboard.!?

@adam: When there would be a keylogger on your pc then there is no secure way of 'typing' your password to the input field. A virtual keyboard is a good solution but it must be implemented directly into the application. So the app knows how to convert the mouse position into a letter. But when you have a virtual keyboard in your script then your script knows the letter you pressed but how do you put this letter into the inputfield?

would be interesting to see a solution for such a common problem

Sundance

Share this post


Link to post
Share on other sites

The solution is to not be stupid enough to get a keylogger on your computer in the first place.


If I posted any code, assume that code was written using the latest release version unless stated otherwise. Also, if it doesn't work on XP I can't help with that because I don't have access to XP, and I'm not going to.
Give a programmer the correct code and he can do his work for a day. Teach a programmer to debug and he can do his work for a lifetime - by Chirag Gude
How to ask questions the smart way!

I hereby grant any person the right to use any code I post, that I am the original author of, on the autoitscript.com forums, unless I've specifically stated otherwise in the code or the thread post. If you do use my code all I ask, as a courtesy, is to make note of where you got it from.

Back up and restore Windows user files _Array.au3 - Modified array functions that include support for 2D arrays.  -  ColorChooser - An add-on for SciTE that pops up a color dialog so you can select and paste a color code into a script.  -  Customizable Splashscreen GUI w/Progress Bar - Create a custom "splash screen" GUI with a progress bar and custom label.  -  _FileGetProperty - Retrieve the properties of a file  -  SciTE Toolbar - A toolbar demo for use with the SciTE editor  -  GUIRegisterMsg demo - Demo script to show how to use the Windows messages to interact with controls and your GUI.  -   Latin Square password generator

Share this post


Link to post
Share on other sites

Use hashing and encryption functions. There are several UDF's available here.

Not very secure but at least it is something.

Share this post


Link to post
Share on other sites

Can the Send function be detected by keyloggers?

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!


Register a new account

Sign in

Already have an account? Sign in here.


Sign In Now
Sign in to follow this  
Followers 0