NiKiZe

Enable CLAT support in Windows 11

Works with x64 OS build 26220 (Preview build)

• Option 108 needs to be accepted

HKLM:\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\DhcpIpv6OnlyPreferred => 1

• CLAT is not enabled by default, you can check more of the settings in help and clat show global

netsh interface clat set global permit=enabled

NiKiZe

# https://learn.microsoft.com/en-us/previous-versions/office/developer/exchange-server-2007/aa565483(v=exchg.80)
$schemaPath = (Get-ADRootDSE).schemaNamingContext

$attributes = @{
  adminDescription = 'ms-Exch-Hide-From-Address-Lists';
  adminDisplayName = 'ms-Exch-Hide-From-Address-Lists';
  attributeID = '1.2.840.113556.1.4.7000.102.73';
  attributeSyntax = '2.5.5.8';
  isMemberOfPartialAttributeSet = $true;
  isSingleValued = $true;

NiKiZe

Convert AP-315 to instant AP mode

Based on

• https://forums.serverbuilds.net/t/aruba-ap-to-iap-conversion/8888
• https://localsharespace.com/convert-aruba-ap-315-to-iap/7/
• https://karubits.com/posts/Converting_Aruba_AP_to_IAP/

Connect serial TTL cable, power on and wait for the Hit <Enter> to stop autoboot: prompt

NiKiZe

iclsclient.inf vulnerbilities

Defender warns about issues in openssl libcrypto-3-x64.dll, libssl-3-x64.dll included in Intel driver. These include, but are not limited to:

• iclsclient.inf_amd64_76523213b78d9046 1.63.1155.1
• iclsclient.inf_amd64_4911ed214bf8cf23 1.67.548.0
• iclsclient.inf_amd64_9783a0a827c7c2a2 1.69.11.0
• iclsclient.inf_amd64_4e9e8c349f3a1aca 1.70.101.0
• iclsclient.inf_amd64_fc84dfa25a6a7727 1.71.99.0
• iclsclient.inf_amd64_b4ad878dc01a7e41 1.72.189.0

NiKiZe

Journey of iPXE boot using IPv6

In IPv6 the boot path is always given as a URL in DHCPv6 option 59 So we need to run a DHCPv6 service for this

dhcpd6.conf:

option dhcp6.bootfile-url code 59 = string;
option dhcp6.client-arch-type code 61 = array of unsigned integer 16;

NiKiZe

  <Target Name="_SignAssemblies" AfterTargets="Compile" DependsOnTargets="CreateSatelliteAssemblies;$(RazorCompileDependsOn)" Condition="'$(CertificateThumbprint)' != ''">
    <ItemGroup>
      <_AssembliesToSign Include="$(IntermediateOutputPath)$(TargetFileName)" />
      <_AssembliesToSign Include="@(IntermediateSatelliteAssembliesWithTargetPath)" />
      <_AssembliesToSign Include="@(RazorIntermediateAssembly)" />
    </ItemGroup>
    <Message Importance="high" Text="Signing assemblies: @(_AssembliesToSign)" />
    <SignFile SigningTarget="%(_AssembliesToSign.Identity)" CertificateThumbprint="$(CertificateThumbprint)" TimestampUrl="$(TimestampUrl)"/>
  </Target>

NiKiZe

Following the documentation at https://support.upsales.com/hc/en-us/articles/360001686068 isnt the easiest.

Available Hotspots

• Company view should have the following:
  • accountCardTop
  • sidebarTop
  • sidebar

But there is no clear information on properties or examples how to use.

NiKiZe

#!/bin/sh -e
#

#Disable wwan
#echo 1-1 | sudo tee /sys/bus/usb/drivers/usb/unbind
uhubctl -l 1-1 -a 0

rmmod cdc_mbim
rmmod cdc_wdm
rmmod cdc_ncm

NiKiZe

#!/bin/bash
# Filter and route on hostname using SNI
# https://github.com/Lochnair/xt_tls/issues/52

# This creates iptables rules and ip rules to filter and route HTTPS traffic based on hostname in SNI field

# Some links on why packets might be droped, see rp_filter below
# https://serverfault.com/questions/934848/ip-rule-to-works-but-ip-rule-fwmark-fails-why
# https://serverfault.com/questions/932205/advanced-routing-with-firewall-marks-and-rp-filter
# https://serverfault.com/questions/816393/disabling-rp-filter-on-one-interface

NiKiZe

#!/bin/bash
# Connect a Raspberry Pi to LTE using MC7700 Mini PCI Modem with adapter to USB-C

sudo qmicli -d /dev/cdc-wdm0 -p --wds-stop-network
sudo cat /sys/class/net/wwan0/qmi/raw_ip
sudo ip link set dev wwan0 down
# Enable OS Raw IP Mode setting (not persistent) 
sudo su -c "echo Y > /sys/class/net/wwan0/qmi/raw_ip"

sudo qmicli -d /dev/cdc-wdm0 -p --device-open-net="net-raw-ip|net-no-qos-header" --wds-start-network="ip-type=6" --client-no-release-cid