Boris REDNBLACK

UDP Trash Hack for WireGuard on AsusWRT Merlin

Подготовка

Проверяем, что включен пункт меню Enable JFFS custom scripts and configs

Установка

Кладём файл wgclient-start в /jffs/scripts/
Делаем скрипт запускаемым

Обход блокировок WireGuard с помощью скрипта на AsusWRT-Merlin

В связи с блокировками со стороны Роскомнадзора, возникает необходимость обойти такие ограничения для WireGuard на вашем роутере. Это можно сделать путем отправки одного произвольного UDP-пакета, который нарушает первоначальное распознавание протокола WireGuard. Следуйте этим шагам, чтобы настроить решение на базе прошивки AsusWRT-Merlin.

Сейчас я разрабатываю установку AmneziaWG для роутеров ASUS с прошивкой AsusWRT-Merlin, что обеспечит более устойчивое и автоматизированное решение этих проблем. Отправка UDP-пакета является временным решением для обхода текущих ограничений, пока не будет завершена интеграция AmneziaWG

Шаг 1: Установка прошивки [AsusWRT-Merlin](https://www.asuswrt-merlin.net/)

Начнем с того, что роутер должен быть прошит прошивкой AsusWRT-Merlin. Проверьте, поддерживается ли ваш роутер, перейдя на сайт AsusWRT-Merlin. Следуйте инструкциям на сайте для установки прошивки.

Tested on macOS Sonoma Developer beta 2 (23A5276g)

Build `libsk-libfido2.so`

Prerequisite

Download openssh-portable source code, install libcrypto, libfido2;
Configure openssh-portable build system by ./configure # [options].

Apply patch

How to install game-porting-toolkit (aka proton for macOS)

You also might wanna just use Whisky which does this automatically

This guide works on macOS 13.4+ using Command Line Tools for XCode 15 Beta!

What is this?

In the recent WWDC, Apple announced and released the "game porting toolkit", which upon further inspection this is just a modified version of CrossOver's fork of wine which is a "compatibility layer" that allows you to run Windows applications on macOS and Linux.

Steam Bots: How to get shared and identity secrets

If you're looking into automating transactions in your Steam Account using Steam Bots, you most likely will need to:

Have TOTP ("MFA" or "2FA") enabled via Steam Authenticator (Steam Guard)
Have in hands both shared secret and identity secret

Having Steam Guard enabled for your Steam Account ensures that there will be no holds on transactions such as trades. Having the shared and identity secrets are necessary for complete autonomy of your Steam Bot, meaning it won't require any human interaction from you.

There is a tremendous lack of information about all of this as Steam does not provide official support for implementing Steam Bots. The information available in this guide was gathered through lots of ~~blood and sweat~~ hard research, reverse eng

Overview

How to configure FreeBSD and applicable applications to work with Yubikey for authentication. This serves as my work-in-progress documentation of the configuration knobs needed to make this work properly.

FreeBSD ssh with piv smartcard slot on Yubikey (pkcs11 via libykcs11.so)
FreeBSD ssh with fido support on Yubikey
FreeBSD Firefox/Chromium with fido + webauthn support on Yubikey
FreeBSD local console and gdm authentication using pam on Yubikey
FreeBSD official YubiKey tools

Latest Tested FreeBSD versions

FreeBSD 13.2 Testing (Aug 2023)
FreeBSD stable/13 Testing (Aug 2023) with OpenSSH_9.3p2

Using A Yubikey For SSH Authentication

Intro

Why do we need this?

Answer is simple – Security! Alternatives include storing private keys directly on a workstation – which makes them poorly protected in multitude of attacks. A better option is to use encrypted usb key but leaving inserted and unsealed usb key for a long time is insecure, while inserting it and removing it back and forth all the time is tedious.

YubiKey suits much better for this purpose by making your SSH keys much more secure while maintaining a great user experience.

What is Yubikey

YubiKey is a hardware security key which provides Universal 2nd Factor (U2F) cryptographic tokens through a USB and/or NFC interface. This means you have to explicitly authorize a new SSH session by tapping the YubiKey. The private SSH key should be useless to a malicious user who does not have access to the physical YubiKey on which the second private key is stored.

	import http.client
	import http.cookies
	import json
	import base64
	import hashlib
	import os
	import random
	import argparse
	import time
	from cryptography.hazmat.primitives import serialization

	import os
	import shutil

	"""
	Steps to retrieve the IPA file from the Configurator app:

	1. Install Apple Configurator from the Mac App Store and sign in
	2. Connect your iOS device to your Mac
	3. Select "Add > Apps..." and search for the app you want to install, click "Add"
	4. The newer Apple Configurator deletes the IPA after installing it, so you'll need to use this tool to grab it

	import http.client
	import http.cookies
	import json
	import base64
	import hashlib
	from cryptography.hazmat.primitives import serialization
	from cryptography.hazmat.primitives.asymmetric import x25519
	from cryptography.hazmat.primitives.asymmetric import ec
	from cryptography.hazmat.primitives import hashes