michele-tn

~@eeowaa Sam post

SSH Tunnels

• ASCII diagrams inspired by this Stack Exchange answer.
• In all of the examples shown, port 123 must be free on your client host before opening the SSH tunnel.

Useful options

• -T: Disables pseudo-tty allocation, which is appropriate because you're not trying to create an interactive shell.
• -N: Says that you want an SSH connection, but you don't actually want to run any remote commands. If all you're creating is a tunnel, then including this option saves resources.
• -f: Tells ssh to background itself after it authenticates, so you don't have to sit around running something on the remote server for the tunnel to remain alive.

michele-tn

Topology

+------------------+                    +----------------------+
|   Local host     |  tcpdump over ssh  |    Remote Host       |
|                  |--------------------|                      |\ eth0
| +--------------+ |--------------------|                      |/
| |   Wireshark  | |                    |  tcpdump -i eth0...  |

| |--------------| | +----------------------+

michele-tn

To Disable UAC

Using a Batch file:

REG ADD "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v "EnableLUA" /t "REG_DWORD" /d "0" /f

Using Powershell:

 @powershell Set-ItemProperty -Path registry::HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\policies\system -Name EnableLUA -Value 0

michele-tn

using System;
using System.Diagnostics;
using System.IO;
using System.Linq;
using System.Net;
using System.Net.Http;
using System.Security.Principal;
using Newtonsoft.Json.Linq;

class Program

michele-tn

# Run as administrator and stays in the current directory
if (-Not ([Security.Principal.WindowsPrincipal][Security.Principal.WindowsIdentity]::GetCurrent()).IsInRole([Security.Principal.WindowsBuiltInRole]::Administrator)) {
    if ([int](Get-CimInstance -Class Win32_OperatingSystem | Select-Object -ExpandProperty BuildNumber) -ge 6000) {
        Start-Process PowerShell -Verb RunAs -ArgumentList "-NoProfile -ExecutionPolicy Bypass -Command `"cd '$pwd'; & '$PSCommandPath';`"";
    }
}

[Net.ServicePointManager]::SecurityProtocol = "Tls, Tls11, Tls12, Ssl3"

# Convert from Base64 to String

michele-tn

pushd "%~dp0" 

dir /b %SystemRoot%\servicing\Packages\Microsoft-Windows-GroupPolicy-ClientExtensions-Package~3*.mum >List.txt 
dir /b %SystemRoot%\servicing\Packages\Microsoft-Windows-GroupPolicy-ClientTools-Package~3*.mum >>List.txt 

for /f %%i in ('findstr /i . List.txt 2^>nul') do dism /online /norestart /add-package:"%SystemRoot%\servicing\Packages\%%i" 
pause

michele-tn

<#                         
 .AUTHOR                     : MICHELE-TN
                            
 .CLIENT DEPLOYMENT          : https://rustdesk.com/docs/en/self-host/client-configuration/
                             : https://rustdesk.com/docs/en/self-host/client-deployment/
                            
 .SERVER DEPLOYMENT          : https://rustdesk.com/docs/en/self-host/
 
 .Techahold/rustdeskinstall  : Easy install Script for Rustdesk
                             : https://github.com/techahold/rustdeskinstall