使用安全字符串检索密码

Question

>我正在创建一个带有安全字符串密码的文件，如下所示

[string][ValidateNotNullOrEmpty()]$secureStringPwd = "password123"
$secpasswd = ConvertTo-SecureString $secureStringPwd -AsPlainText -Force
$secureStringText = $secpasswd | ConvertFrom-SecureString 
Set-Content "C:folderuser.txt" $secureStringText

现在我正在尝试通过以下方式检索密码

$Password = Get-Content "C:folderuser.txt" | ConvertFrom-SecureString 
$creds = New-Object System.Management.Automation.PSCredential ("user", $Password)
$creds.Password
$creds.UserName

但是我收到如下错误：

New-Object : Cannot find an overload for "PSCredential" and the argument count: "2".
At line:1 char:10
+ $creds = New-Object System.Management.Automation.PSCredential ("user ...
+          ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo          : InvalidOperation: (:) [New-Object], MethodException
+ FullyQualifiedErrorId : ConstructorInvokedThrowException,Microsoft.PowerShell.Commands.NewObjectCommand

Answer 1

您需要将文本文件中的密码转换回安全字符串

$Password = Get-Content "C:folderuser.txt" | ConvertTo-SecureString

此外，您还需要使用网络凭据将密码转换为纯文本

$creds.GetNetworkCredential().Password

这是一个工作示例

[string][ValidateNotNullOrEmpty()]$secureStringPwd = "password123"
$secpasswd = ConvertTo-SecureString $secureStringPwd -AsPlainText -Force
$secureStringText = $secpasswd | ConvertFrom-SecureString 
Set-Content "C:folderuser.txt" $secureStringText
$Password = Get-Content "C:folderuser.txt" | ConvertTo-SecureString 
$creds = New-Object System.Management.Automation.PSCredential ("user", $Password)
$creds.GetNetworkCredential().Password
$creds.UserName