Alfred Moreno kryptek

Introduction

The purpose of this short howto is to show you how to:

use openconnect [1] to connect to an enterprise cisco anyconnect endpoint
whilst minimizing the amount of traffic that your route through the vpn connection

Usually VPN administrators will puth the default route to the users, so that all user traffic is routed through the vpn connection. This is to address the various security concerns around compromised user computers bridging external internet traffic into the secure VPN network.

While the VPN administrator can push routes to the clients, the client can ignore these default routes and establish client side routing so that only the required A.B.C.D/E network is routed through the VPN. All other traffic will still use the clients default route and default outbound internet connection.

method 1

sudo /usr/local/McAfee/AntiMalware/VSControl stopoas

alternatively

sudo defaults write /Library/Preferences/com.mcafee.ssm.antimalware.plist OAS_Enable -bool False
sudo /usr/local/McAfee/AntiMalware/VSControl stop
sudo /usr/local/McAfee/AntiMalware/VSControl reload

	#EXTM3U
	#EXTINF:0,A SportsHD
	http://121.91.61.106:8000/play/a03o/index.m3u8
	#EXTINF:0,Action Hollywood Movies
	https://cdn-apse1-prod.tsv2.amagi.tv/linear/amg01076-lightningintern-actionhollywood-samsungnz/playlist.m3u8
	#EXTINF:0,Adventure Earth
	https://i.mjh.nz/SamsungTVPlus/GBBC900015D3.m3u8
	#EXTINF:0,And Flix
	https://jiotv.nayeemparvez.workers.dev/bpk-tv/And_Flix_HD_MOB/Fallback/index.m3u8
	#EXTINF:0,And Prive HD

	import requests #dependency

	url = "<your url>" #webhook url, from here: https://i.imgur.com/f9XnAew.png

	#for all params, see https://discordapp.com/developers/docs/resources/webhook#execute-webhook
	data = {
	"content" : "message content",
	"username" : "custom username"
	}

	# references:
	# Learning by doing: Writing your own traceroute in 8 easy steps (Ksplice Blog)
	# https://blogs.oracle.com/ksplice/entry/learning_by_doing_writing_your

	import sys
	import socket

	def traceroute(dest_addr, max_hops=30, timeout=0.2):
	proto_icmp = socket.getprotobyname('icmp')
	proto_udp = socket.getprotobyname('udp')

	#!/usr/bin/env python
	import socket
	import fcntl
	import struct
	import array

	SIOCETHTOOL = 0x8946
	ETHTOOL_GSTRINGS = 0x0000001b
	ETHTOOL_GSSET_INFO = 0x00000037
	ETHTOOL_GSTATS = 0x0000001d

	#!/bin/bash

	# port, username, password
	SERVER="localhost:9091 --auth user:pass"

	# use transmission-remote to get torrent list from transmission-remote list
	TORRENTLIST=`transmission-remote $SERVER --list \| sed -e '1d' -e '$d' \| awk '{print $1}' \| sed -e 's/[^0-9]*//g'`

	# for each torrent in the list
	for TORRENTID in $TORRENTLIST

	import logging
	import os
	import paramiko
	import subprocess
	import socket
	import time

	logging.basicConfig(level=logging.INFO, datefmt='%F %T', format='%(asctime)s %(name)s.%(module)s %(levelname)s: %(message)s')
	logger = logging.getLogger('ssh_client')

	#!/usr/bin/python
	# -- coding: UTF-8 --
	'''
	Custom SSH client.

	1. It somehow _supports_ async execution.
	2. It provides exit status.
	3. It jams stdin (ssh -nT).

	Run like something "python ssh.py box user=bs command='echo aaa; echo bbb >&2; sleep 40; exit 23'" to test