Jump to content

Need Help Regarding AutoIt use

Recommended Posts

Hi all,

I wanted to use AutoIt in corporate environment. Is it safe to use AutoIt? Does it access any network after I install it on my machine?

Is it harmful in any way to my secured corporate code ? Any changes of my secured code getting leaked outside over internet?


Link to post
Share on other sites

Hi and welcome to the forum,

AutoIt is safe for corp use. Look around and you'll see that a good number of high-profile members are themselves corp admins and use AutoIt for their job on a daily basis.

Neither AutoIt nor the executables which it produces unwillingly access to any network. The only two instances of a possibly unexpected network access is optional automatic check for new version of the AutoIt companion tools and the current version of the SQLite UDF.

The reason behind the later is that previous AutoIt distributions included the SQLite3.dll file, in both 32- and 64-bit versions. This was more than doubling the size of the product distribution. Hence it was decided that the UDF would try (hard) to locate the dll and in case of failure, download the latest 32- or 64-bit DLL from AutoIt repository.

In case of use of SQLite in a corp environment, I strongly recommend and even politely demand that you download the DLLs for yourself and embed it in executables which need it or otherwise make sure individual workstations don't download from our repository by the yard.

Aside from this and obviously when your application explicitely accesses the network or the Internet, no part of AutoIt will ever leak stuff from any machine, nor "call home", ever.

A couple of things you might be interested in knowing beforehand: due to some script kiddies misusing the product to cheat on games or attempt to create naive malware, some antivirus product report packed AutoIt executables as trojan or something. These false positives are no threat, read the sticky post about that point.

Last point: AutoIt uses an interpretor which means that at some point the full source code is in memory. A direct consequence is that you shouldn't place trade secrets inside AutoIt application code. But, as a seasoned professional, you already know that software is inherently unsecure and may be completely reverse-engineered, whatever language you use. Discussion of this subject is a taboo on the forum, as stated explicitely in the Forum Rules sticky above.

Now we're all here to help, especially serious users.

Welcome on board.

This wonderful site allows debugging and testing regular expressions (many flavors available). An absolute must have in your bookmarks.
Another excellent RegExp tutorial. Don't forget downloading your copy of up-to-date pcretest.exe and pcregrep.exe here
RegExp tutorial: enough to get started
PCRE v8.33 regexp documentation latest available release and currently implemented in AutoIt beta.

SQLitespeed is another feature-rich premier SQLite manager (includes import/export). Well worth a try.
SQLite Expert (freeware Personal Edition or payware Pro version) is a very useful SQLite database manager.
An excellent eBook covering almost every aspect of SQLite3: a must-read for anyone doing serious work.
SQL tutorial (covers "generic" SQL, but most of it applies to SQLite as well)
A work-in-progress SQLite3 tutorial. Don't miss other LxyzTHW pages!
SQLite official website with full documentation (may be newer than the SQLite library that comes standard with AutoIt)

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    No registered users viewing this page.

  • Create New...