powershell - Powershell中的psexec不接受加密的密码

Question

Powershell脚本在remote_machine上执行script.ps1

read-host -assecurestring | convertfrom-securestring | out-file D:\Script\cred.txt
$password = get-content D:\Script\cred.txt | convertto-securestring

$pwd = "plaintext_password"
$j = "remote_computer"
$comp = "\\"+$j

$command = "D:\PSTools\PsExec.exe $comp -u Administrator -p $pwd -accepteula powershell.exe c:\share\script.ps1"

Invoke-Expression $command

但是，如果我用$ password替换$ pwd，即

$command = "D:\PSTools\PsExec.exe $comp -u Administrator -p $password -accepteula powershell.exe c:\share\script.ps1"

我懂了

The user name or password is incorrect.

我多次正确输入密码

Answer 1

这将返回一个SecureString而不是未加密的字符串:

$password = get-content D:\Script\cred.txt | convertto-securestring

当该变量在字符串中使用时，它将扩展为类型名称 System.Security.SecureString。您可以使用以下脚本将加密的密码提取为纯文本:

$bstr = [System.Runtime.InteropServices.Marshal]::SecureStringToBSTR($password)
$str =  [System.Runtime.InteropServices.Marshal]::PtrToStringBSTR($bstr)
[System.Runtime.InteropServices.Marshal]::ZeroFreeBSTR($bstr)
$str