wsh

Dialog window will create by means of scripts, which are ASCII text files with a format somewhat similar to .RC files. (No, its not as complicated as you might be thinking!) You can make some dialog window and you can use this dialog in your program (JScript, VBScript, HTA, ...) because this is ActiveX! The WSH.GUI ActiveX control comes AS-IS without any warranty and support. Use the control at your own risk.

WSH.GUI host - The new script shell. It is not wscript.exe! It is the dialog window machine. (Advanced object model: Objects: Window(GUI) and TCPIP(FTP))

engine.exe - an interpreter of the programs on JScript and VBScript, in which interpretation language element is entrusted system kernel: scrobj.dll thereby script engine differ only additional object model, but realization of the language is completely entrusted on library from Microsoft.

Script, uncared-for in my host gains access to object Window (and TCPIP), causing its methods and characteristic, builds dialogue window, places on him field of the entering, executes graphic operators and so on.

Wsh, "Web Shell" is a remote UNIX/WIN shell, that works via HTTP/HTTPS. The package contains two perl scripts for server and client hosts, one C source code and one Java servlet code for the server host : the client script is for console usage and the server scripts run as CGI/Servlet scripts on the target host.

The client part provides shell-like prompt, encapsulating user commands into HTTP POST requests and sending them to the server part script on the target web server directly or via HTTP proxy server.

The server part extracts and executes commands from HTTP post requests and returns STDOUT and STDERR output as HTTP response messages. By default both scripts encode HTTP data with Xor.

Here are some key features of "Web shell":

· SSL support
· Command line history support
· File upload/download
· Protect server part script usage with secret key inside HTTP message
· Data flow Xor encoding
· Can work trough HTTP proxy server.



Whats New in This Release:

· WSH server Java servlet version was added.
· Disabled "why is it enabled ?" auth in wsh-c.conf.
· Corrected header fields mistakes in wsh-c-* (X-* => HTTP_X*)



Instalation

1. Check path to perl in the "config.pl" file;

2. Run "config.pl" : `./config.pl`
OPTIONAL ----------------------------------------------------
Modify the file "wsh-c.conf", if you want to use HTTP proxy;
use_proxy 1
proxy_ip
port
Check other client configuration options also..
-------------------------------------------------------------

3. For the wsh-s.c and WshServlet.java, check the Shell (*Nix or Win32) location;

4a. Perl server version :
+ Check path to perl and permissions of the newly created "wsh-c.pl";
+ Upload wsh-s.pl under the target cgi-bin directory and check path to perl;

4b. C server version :
+ Upload wsh-s.c under the target cgi-bin directory and compile it (remove the source code after) :
* Under *Nix : gcc -g2 -Wall -o wsh-s wsh-s.c
* Under Win32 (Visual C++) : cl /W3 wsh-s.c ws2_32.lib
* Under Win32 Cygwin : Set the WIN32_RUN variable in the source code and build it as for the *Nix version.

4c. Java servlet version :
+ Upload the java built version under a servlet executable location.

About SSL :

a. If you use a SSL wsh-c.pl client, you can configure the client to check the server certificate CN (but this check can be circumvented !):
my $ssl_set_check=1;
# (0 || 1) dont or check the webserver
# ssl certificate with internal
# ssl_crt_subject.

my $ssl_crt_subject="/C=Fr/ST=Paris/L=Paris/O=XXX/OU=XXX/CN=XXX";
=> You only have to execute the wsh-c.pl client one time and grab the CN displayed by the error message.

b. We didnt check the wsh-c-SSL.pl client on a Win32 platform. If you manage to install the Net::SSLeay on Win32 and check wsh-c-SSL.pl, send us a mail.

Uses include copy, backup, delete, and synchronize files. This is the answer to Dos batch and Windows Shell Host(WSH) files. It performs many of the file operations that you can do in batch or WSH files. Files are created by using in a Windows Explorer like user interface. It has easy to use dialogs that allow you to create and modify batch entries with ease. It is very useful for telecommuters. Learning curve isshort. No more headaches trying to setup file operations with batch files or WSH files.

Full heuristic scanning package that intercepts all known and unknown script executions, including VBS, VBE, JS, WSH, etc. Provides full Heuristic analysis of the script, a danger rating, and action buttions -- including delete script, ignore script and run scriptincludes administrative abilities, including disabling of specific action buttons, and password configuration on run script action button.

ASP windows registry editor is a complette COM interface to read/enumerate/modify windows registry keys and values from ASP/WSH/VBA/IE/VBS/JScript and T-SQL.

Lets you work with remote registry and logon to user account with required access rights.

Limitations:

· 60 day trial

ActiveXperts Scripting Toolkit description
Call a VBScript function directly from your application without invoking WSH ActiveX component to call VBScript functions directly from your source code without invoking WSH, CSCRIPT or WSCRIPT. Use the function result directly. Set function timeout and catch exception errors.

ActiveXperts Scripting Toolkit is a tool that call VBScript functions directly from your source code.

The component is thread-safe, so you can use it in any multi-threading environment. Samples included for Visual Basic, Visual Basic .NET, Visual C++, Visual C# .NET, ASP, ASP .NET and more.

AderSoft VbsEdit 2.0 is an award-winning VBScript editor (for VBS files - Wscript - WSH) that includes the following features:

Debug mode
Dynamic help
Syntax coloring
Find / Replace
Undo / Redo
Line and column numbering
Run VBScripts from the editor (wscript)
Run VBScripts from the editor in console mode (cscript)
Drag-and-drop support
Insert and overstrike modes
Printing (color / Black and white)
Mouse wheel support
Auto-capitalize keyword
Shell integration