Christian I. Nilsson NiKiZe

iclsclient.inf vulnerbilities

Defender warns about issues in openssl libcrypto-3-x64.dll, libssl-3-x64.dll included in Intel driver. These include, but are not limited to:

iclsclient.inf_amd64_76523213b78d9046 1.63.1155.1
iclsclient.inf_amd64_4911ed214bf8cf23 1.67.548.0
iclsclient.inf_amd64_9783a0a827c7c2a2 1.69.11.0
iclsclient.inf_amd64_4e9e8c349f3a1aca 1.70.101.0
iclsclient.inf_amd64_fc84dfa25a6a7727 1.71.99.0
iclsclient.inf_amd64_b4ad878dc01a7e41 1.72.189.0

Journey of iPXE boot using IPv6

In IPv6 the boot path is always given as a URL in DHCPv6 option 59 So we need to run a DHCPv6 service for this

option dhcp6.bootfile-url code 59 = string;
option dhcp6.client-arch-type code 61 = array of unsigned integer 16;

# match arch to send correct booturl https://ipxe.org/cfg/platform#notes

Following the documentation at https://support.upsales.com/hc/en-us/articles/360001686068 isnt the easiest.

Available Hotspots

Company view should have the following:
- accountCardTop
- sidebarTop
- sidebar

But there is no clear information on properties or examples how to use.

    public interface IName
    {
        /// <summary>Default property override</summary>
        [System.Runtime.CompilerServices.IndexerName("_Item")]
        object this[string key] { get; }
    }

    public class ImplNameCs : IName
 {

	<Target Name="_SignAssemblies" AfterTargets="Compile" DependsOnTargets="CreateSatelliteAssemblies;$(RazorCompileDependsOn)" Condition="'$(CertificateThumbprint)' != ''">
	<ItemGroup>
	<_AssembliesToSign Include="$(IntermediateOutputPath)$(TargetFileName)" />
	<_AssembliesToSign Include="@(IntermediateSatelliteAssembliesWithTargetPath)" />
	<_AssembliesToSign Include="@(RazorIntermediateAssembly)" />
	</ItemGroup>
	<Message Importance="high" Text="Signing assemblies: @(_AssembliesToSign)" />
	<SignFile SigningTarget="%(_AssembliesToSign.Identity)" CertificateThumbprint="$(CertificateThumbprint)" TimestampUrl="$(TimestampUrl)"/>
	</Target>

	#!/bin/sh -e
	#

	#Disable wwan
	#echo 1-1 \| sudo tee /sys/bus/usb/drivers/usb/unbind
	uhubctl -l 1-1 -a 0

	rmmod cdc_mbim
	rmmod cdc_wdm
	rmmod cdc_ncm

	#!/bin/bash
	# Filter and route on hostname using SNI
	# https://github.com/Lochnair/xt_tls/issues/52

	# This creates iptables rules and ip rules to filter and route HTTPS traffic based on hostname in SNI field

	# Some links on why packets might be droped, see rp_filter below
	# https://serverfault.com/questions/934848/ip-rule-to-works-but-ip-rule-fwmark-fails-why
	# https://serverfault.com/questions/932205/advanced-routing-with-firewall-marks-and-rp-filter
	# https://serverfault.com/questions/816393/disabling-rp-filter-on-one-interface

	#!/bin/bash
	# Connect a Raspberry Pi to LTE using MC7700 Mini PCI Modem with adapter to USB-C

	sudo qmicli -d /dev/cdc-wdm0 -p --wds-stop-network
	sudo cat /sys/class/net/wwan0/qmi/raw_ip
	sudo ip link set dev wwan0 down
	# Enable OS Raw IP Mode setting (not persistent)
	sudo su -c "echo Y > /sys/class/net/wwan0/qmi/raw_ip"

	sudo qmicli -d /dev/cdc-wdm0 -p --device-open-net="net-raw-ip\|net-no-qos-header" --wds-start-network="ip-type=6" --client-no-release-cid

	ddns-update-style none;
	deny bootp; #default
	authoritative;

	include "/etc/dhcp/ipxe-option-space.conf";

	# GREEN (private network)
	subnet 10.1.1.0 netmask 255.255.255.0 {
	range 10.1.1.100 10.1.1.199;
	option subnet-mask 255.255.255.0;

	# Known working dnsmasq version 2.85 config for iPXE proxydhcp usage
	# things to replace:
	# * 10.1.1.0 - your subnet
	# * eth0 - interface to listen on, or switch to bind-dynamic
	# * 10.1.1.2 - your tftp server ip
	# * http://gentoo.ipxe.se/boot.ipxe - script to run once inside iPXE

	# Debug logging
	log-debug