Run a encrypt script for insatllation

[herryjelo]

I have some issue with AutoIT since my company often request to change the administrator password. But if the password been changed there's have lots of installation scripts that have to be modified.

There's some installation when the end-user installs by themself the program they will be asked for UAC.

Here's my script to run the installation. 

Local $iPID = RunAs($id,"domain", $pw , 0,$path);

Now I'm trying to make a different way to solve changing password issues, by using read the .txt file that includes Login and password. (After the works are done just need to change the password in password.txt file)

But there's a concern if the text file isn't the AES code, User can see the password.

Thanks for patience, pls help!

[careca]

What password are we talking about here? The Admin? Im trying to decrypt your post, trying to understand what you want to encrypt and why.

From what im understanding you're trying to encrypt login and password credentials that the user should not have access to, is that it?

You have a autoit script that logins for the user or something?

[herryjelo]

@careca 

Hi, 

Yes, I mean the Admin.

 I'm trying to encrypt login and password credentials that the user should not have access to.

The usual  autoit script was 

Local $iPID = RunAs("login",xxx.com, "passwaord" , 0, "\User\install.bat");

install.bat script

@echo off

echo ******************************************************************************************
echo    Avaya one-X Communicator installation process is running.
echo.
echo    Please click 『Yes』 to continue.
echo.
echo    This window will be closed after all installations and configurations are completed.
echo ******************************************************************************************

call \\twtpews11xxxxxx\license$\Avaya\Avaya6211.exe /silent /ENABLEVIDEO=0 /ISFeatureInstall=OneXC %1

After  compile first picture script to .exe can make sure user can't see the  login and password.

I'll put it on the server let user  download and install by themself.

 

Problem is I have to edit every .au3 scripts to .exe if the password change.

So is there any way I can write into the autoit script that is read by .txt file, that i'll just change the password in .txt file.

[careca]

I think so, i think you can make something like that, but there are still risks involved, since you have to basically allow the script to decrypt.

Let me take a look a encryption see if i can come up with something useful.

EDIT: after taking a look at the crypt functions, i could not figure out a way to make sure you can do what you intend, without exposing either the key or the encrypted password.

I just dont know enough to make recomendations on this matter.

There are many smarter people than me that can chime in.

Edited June 5, 2020 by careca