TABLE OF CONTENTS Prototype: Date
Summary: This function returns the current system date.
Description: The VBScript Date function returns the current local time and date of the underlying operating system in its native format. As with most VBScript functions, Date is a reserved word that takes no parameters nor does it first need to be prototyped or initialized.
Risk: The local server time could be utilized to ascertain geography-specific information on a cyber target. This information could then be leveraged to advance an attack. Ensure that it is acceptable to release the system's time and date settings to external parties before outputting the results of this function to human users.
Note: In general, this function was written for Microsoft Windows-based operating systems.
Additional Resources: http://msdn.microsoft.com/library/default.asp?url=/library/en-us/script56/html/vtoriVBScript.asp
Impact: Low
Cross References: Now, Time, Cdate
Prototype: debug.write(string1, string2, stringX)
Summary: This function sends a string to the Microsoft script debugger.
Description: The Write method is extended from the VBScript Debug object. The VBScript Write method sends strings to the active script debugger. While there is no limitation on the number of strings that can be sent to the debugger for contextual analysis, it is a function that has the potential to put a lag on system resources. In most cases, it's beneficial to enable just-in-time (JIT) debugging when utilizing this method.
Risk: Methods that utilize a backend debugger are in danger of putting underlying executables and applications at risk when that debugger is called. It is not uncommon for...
