Page 1 of 1

Something to think about. Please Fix this issue.

Posted: Wed Apr 26, 2017 5:25 pm
by rocky.pabillore
My coworker found this powershell decompiler. The source code I heard was not published. Some of us users write confidential codes with passwords and wrap it up using your packaging tool to create .exe.

This tool can decompile any exe scripts.

Link: https://www.remkoweijnen.nl/blog/2017/0 ... owershell/

please help your users be aware and fix this issue.

Re: Something to think about. Please Fix this issue.

Posted: Wed Apr 26, 2017 8:04 pm
by Alexander Riedel
Packages built with the latest service builds cannot be unpacked with this tool as far as we know.
Script packages are and never will be 100% secure. Due to the nature of PowerShell and its engine the code MUST exist as clear text at some point in the process. We strongly advise to never use passswords or any other confidential information in your code.

Re: Something to think about. Please Fix this issue.

Posted: Thu Apr 27, 2017 8:58 am
by rocky.pabillore
we just tested this on a script that was compiled using version 3, and it did spit out everything as a string. Version 5 so far did not.

Re: Something to think about. Please Fix this issue.

Posted: Thu Apr 27, 2017 9:13 am
by Alexander Riedel
I was referring to the product version and not the powershell version. Obviously you will need to repackage your executables