Skip to content

Instantly share code, notes, and snippets.

View rikka0w0's full-sized avatar

Rikka0_0小六花 rikka0w0

281 followers · 32 following
  • UNSW
  • Sydney
View GitHub Profile
@rikka0w0
rikka0w0 / pve_disable_ipv6_per_vmbr.md
Created July 2, 2024 03:39

I'm running an OpenWrt as a VM on a PVE hypervisor. The vmbr0 interface is used as private LAN and the vmbr1 is for the public WAN.

I noticed that vmbr1 got an IPv6 via SLAAC, and the admin web console was accessible on the public Internet. This is a safety threat and must be resolved. The solution is to remove the unwanted IPv6.

Method 1 - Disable IPv6 on a per-interface base

Run the following command to append to /etc/sysctl.conf, then reboot. echo 'net.ipv6.conf.vmbr1.disable_ipv6 = 1' >> /etc/sysctl.conf

Method 2 - Disable SLAAC on a per-interface base

@rikka0w0
rikka0w0 / hcxdumptool_hashcat_kali.md
Last active April 20, 2024 13:34

Find out if your Wifi adapter supports monitor mode

Windows: netsh wlan show wirelesscapabilities in admin cmd shell, look for Network monitor mode.

Linux: iw list | grep -Fe "Supported interface modes" -n10, look for * monitor in section Supported interface modes:.

In Kali Linux

I boot a live Kali 2024.1 on a 8G USB stick on a Acer ES1-531-P8NJ and install hcxdumptool and hcxtools from the official repo. The version of hcxdumptool from the repo is 6.3.1 as of 20240420.

Stop Wifi related services

@rikka0w0
rikka0w0 / openwrt_pve.md
Last active March 27, 2024 13:19
Install an OpenWrt KVM on a PVE host machine
  1. Install PVE using the official ISO and create a KVM with 512MB of ram and no disk.
  2. In the PVE host shell, run these commands to import the official OpenWrt image into the VM:
cd /tmp
wget https://downloads.openwrt.org/releases/23.05.2/targets/x86/64/openwrt-23.05.2-x86-64-generic-squashfs-combined-efi.img.gz
gunzip openwrt-23.05.2-x86-64-generic-squashfs-combined-efi.img.gz
# Replace 101 with the VM ID 
qm importdisk 101 openwrt-23.05.2-x86-64-generic-squashfs-combined-efi.img local-lvm

https://medium.com/@aj.abdelwahed/openwrt-on-proxmox-ve-turn-your-raspberry-pi-into-a-networking-powerhouse-ee61bd2f342c

@rikka0w0
rikka0w0 / workstation_pve_win11
Last active March 19, 2024 07:07
[Workstation]pve install win11
# `cat /etc/default/grub`
`GRUB_CMDLINE_LINUX_DEFAULT="intel_iommu=on kvm.ignore_msrs=1 vfio-pci.ids=10de:2786,10de:22bc pci=realloc"`
May also need: `video=efifb:off video=simplefb:off`
# `cat /etc/modprobe.d/blacklist-nouveau.conf`
```
blacklist nouveau
options nouveau modeset=0
```
@rikka0w0
rikka0w0 / kcp.md
Created December 14, 2023 17:47
Pure JS KCP Impl
@rikka0w0
rikka0w0 / hyperv_linux_bridge.md
Created December 6, 2023 05:18 
$a = Get-VMSystemSwitchExtensionPortFeature -FeatureId 776e0ba7-94a1-41c8-8f28-951f524251b5
$a.SettingData.MonitorMode = 2
Add-VMSwitchExtensionPortFeature -ExternalPort –SwitchName "DefaultSwitch" -VMSwitchExtensionFeature $a

Also check Enable MAC address spoofing in the VM's NIC settings.

@rikka0w0
rikka0w0 / index.html
Created November 11, 2023 16:59
A simple shell on Webpage with NodeJS
<!DOCTYPE html>
<html>
<head>
<title>Simple Webshell</title>
<style>
body {
font-family: 'Consolas', monospace;
}
#commandInput {
display: block;
@rikka0w0
rikka0w0 / plot_ti.m
Created September 28, 2023 06:31
Plot TI's memory dump in matlab
% Specify the file path
file = 'D:\1.txt';
count = 4;
length = 256;
% Open the file for reading
fid = fopen(file, 'r');
% Read all lines from the file
data = textscan(fid, '%f', 'HeaderLines', 1);
@rikka0w0
rikka0w0 / udp46.ps1
Created September 7, 2023 17:10
Use powershell to allow a UDP IPv4 client to connect to an IPv6 host
Add-Type -TypeDefinition @"
using System;
using System.Net;
using System.Net.Sockets;
using System.Threading;
public static class UDPForward
{
public static void Main(string[] args)
{
@rikka0w0
rikka0w0 / only_allow_local_remote_desktop.ps
Created August 8, 2023 07:09
Only allow local access to remote desktop
# Get the "Remote Desktop - User Mode (TCP-In)" rule
$rule = Get-NetFirewallRule -DisplayName "Remote Desktop - User Mode (TCP-In)"
# Get the associated firewall filter
$filter = Get-NetFirewallAddressFilter -AssociatedNetFirewallRule $rule
# Set the private IPv4 and IPv6 ranges, including full loopback and link-local addresses, for the Remote Address
Set-NetFirewallAddressFilter -InputObject $filter -RemoteAddress "10.0.0.0/8", "172.16.0.0/12", "192.168.0.0/16", "fc00::/7", "fd00::/8", "127.0.0.0/8", "169.254.0.0/16", "fe80::/10"
# Set the port to 3389