Stunnix VBS-Obfus

Introduction to Stunnix VBS-Obfus
The current trend in the application and web development industry is switching from compiled languages like C/C++ and Delphi to scripting languages like Perl, Javascript or VBScript. One of the main disadvantages of these languages for developers of commercial applications is the great ease by which customers and competitors can study, analyze and reuse the code. For custom solutions the risk of losing control over intellectual property is even higher since it's much more difficult to track violations of intellectual property in them due to the highly targeted or even exclusive distribution of such solutions or products. In such cases, violations of intellectual property can take the form of reuse of the original source code even with an arbitrary level of adaptation! Due to the ease which study and modification can be performed, it is extremely difficult to enforce the licensing conditions of the applications or sites (for example - permission to use the script only on a single website, and only until a specified date has occurred).

Stunnix ASP and VbScript Obfuscator is a unique solution for this piracy and misuse problem for ASP and client-side code written in VBScript programming languages. It provides both an obfuscation and an encoding tool for client-side VBScript code in .vbs files and in HTML, PHP, ASP and JSP pages as well as for server-side ASP code, with advanced support for adding extremely difficult to remove automatic licensing checks.

Stunnix ASP and VbScript Obfuscator converts scripts in input files into highly mangled and obfuscated form. This makes them extermely difficult to study, analyse, reuse and re-work for competitors or customers, while retaining the full functionality of the original code. By default that highly mangled and obfuscated code is encoded afterwards to hide the structure (control flow, division into subroutines and classes) of the script completely. Stunnix ASP and VbScript Obfuscator is not a compiler to machine or pseudo code. The protected form will still be the usual script or html or asp file, thus it will work on all platforms the original code worked on. State of the art support for ensuring license conditions (expiration, several types of hostname checks, user-defined checks) is also available. Note, that Stunnix ASP and VBScript Obfuscator is referred to as Stunnix VBS-Obfus for brevity sometimes on this site.

The features summary of Stunnix ASP and VBScript Obfuscator and Encoder
• Unique! It extracts all string constants found in your code, and lets browse all of them, or those equal to symbol used in your project (most probably they are property name), or those containing some symbol used in your project (probably used in eval()-like calls), or those looking like symbol. This allows to quickly compose list of "exceptions" - names of symbols that should not be modified.
• Unique! ASP and VBScript Obfuscator and Encoder is cross-platform product, it can be easily installed and used on Windows, Mac OS X, Linux, Solaris or any other Unix OS.
• Unique! By default encoding of VBScript code is applied to the result of obfuscation performed by ASP and VBScript Obfuscator and Encoder
• Unique! ASP and VBScript Obfuscator and Encoder has support for VBScript expiration, binding to server and user-implemented licensing checks with standard or user-specified actions (such as showing alerts)
• Unique! ASP and VBScript Obfuscator and Encoder includes Obfuscation Project Manager - an advanced intuitive cross-platform (Windows, MacOS X, Linux and Unix) graphical user interface for protecting any size project created with VBScript with mixed types of code (client-side and server-side), complete with with IDE-like functionality (supporting Build, Rebuild Changed, Clean)
• It can extract symbols for any API - just provide a directory with the files defining API
• Unique! Protect VBScript inside string constants in any file with any programming language - Java, C/C++, C# or Pascal
• Unique! ASP and VBScript Obfuscator and Encoder has special debugging mode and unique tools to generate a list of symbols that can't be changed, saving development time.
• Unique! ASP and VBScript Obfuscator and Encoder supports several advanced ways to generate obfuscated names including using shortest possible name.
• ASP and VBScript Obfuscator and Encoder has state of the art support for the obfuscation and encoding of client-side and server-side VBScript scripts embedded into HTML, PHP, ASP and ASP.NET, WSH/WSC and of course in raw files.
• Unique! ASP and VBScript Obfuscator and Encoder also can protect html, php, .asp and .jsp and other files that don't contain any scripts at all!
• Unique! ASP and VBScript Obfuscator and Encoder has support for obfuscating dynamic VBScript code inside string arguments of "print()" calls and the like
• Unique! Full support for projects consisting of several VBScript files and use of eval
• Unique! Many options to tightly control the obfuscation and encoding of ASP and VBScript Obfuscator and Encoder
• Unique! Ability to watermark VBScript and to make the study of changes between versions of the same file more difficult
• Unique! ASP and VBScript Obfuscator and Encoder allows creation of lists of symbols that shouldn't be modified; Many exception tables for standard interfaces are included
• Obfuscated and/or encoded code runs on any VBScript interpreter