How safe is BAT from EXE from a decompilation perspective?
How safe is BAT from EXE from a decompilation perspective?
Hi,
I’m working with an Advanced BAT to EXE converter. The free version functions properly, but the resulting EXE isn’t portable.
https://www.battoexeconverter.com/
It converts batch files into executables and says it encrypts the source code during creation.
I have a batch file with a hardcoded password.
Although I understand it’s not ideal to embed passwords in code, I’m curious about its security from a general perspective. Is anyone aware of how secure this encrypted version really is?
The free version might lack email support, so I’m unsure if the developers would respond to my questions.
In short, if I hand over my laptop or leave it with a repair shop, I’d be worried.
I don’t have experience with decompilation, but I tried opening the EXE in a hex editor and didn’t find any readable password.
It's an FTP upload BAT script designed for easy automated use without manual intervention. If someone discovers the password, they'll gain access to the FTP account. I've experimented with various BAT to EXE converters, but none exposed the hardcoded details in plain text within the EXE. This suggests a strong level of protection is in place!
Thank you for your reply.
Are you aware of the answer to my question?
The file I uploaded is already encrypted, so I don't need SFTP.
Yes, at some stage the password must reach the FTP server without encryption.
If a "bad guy" gains access to your script, the password is likely already compromised. It's quite unlikely the encryption is truly secure. The script probably needs to send the (unencrypted) password to the server for verification. At that stage, the unencrypted password remains in memory and can be easily accessed.