CkeyRun command detail

Readme.md

Explaination of irm https://ckey.run/ | iex

This command irm https://ckey.run/ | iex do the job. But I also did not want to run it because of security reason. So look what it do.

You can manuallly do what the ckey.run do.

Short answer: Hook the jvm using ja-netfilter agent by modifying *.vmoptions file

Long Answer:

• Downloaded some files. The files are:

.jb_run/
├── config
│   ├── dns.conf
│   ├── native.conf
│   ├── power.conf
│   └── url.conf
├── ja-netfilter.jar
└── plugins
├── dns.jar
├── hideme.jar
├── native.jar
├── power.jar
├── privacy.jar
└── url.jar

• all the file except *.conf and privacy.jar are from at ja-netfilter 2022.2.0
• modify *.vmoptions as said at Readme of ja-netfilter
• In Windows, environment variables like IDEA_VM_OPTIONS, CLION_VM_OPTIONS, PYCHARM_VM_OPTIONS, etc., are stored in the registry under HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Environment and HKEY_CURRENT_USER\Environment are removed. On Unix, they can be found in ~/.bash_profile, ~/.bashrc, ~/.zshrc, or ~/.profile if they exist are removed. It's unclear why, as my system doesn't seem to have them in the registry or environment files at all.

Manual steps:

• Download jar files from ja-netfilter 2022.2.0 and put somewhere like at ~/.jb_run/

• Store it like the above mention file-tree

• modify the *.conf file according to https://ckey.run/ja-netfilter/config/*.conf, eg https://ckey.run/ja-netfilter/config/dns.conf, https://ckey.run/ja-netfilter/config/power.conf

• add the folling line to *.vmoptions in the bin foldewr as said at Readme of ja-netfilter

--add-opens=java.base/jdk.internal.org.objectweb.asm=ALL-UNNAMED
--add-opens=java.base/jdk.internal.org.objectweb.asm.tree=ALL-UNNAMED
-javaagent:/absolute/path/to/ja-netfilter.jar

• if you are more paranoid like me, you can decompile privacy.jar after downloading from
  https://ckey.run/ja-netfilter/plugins/privacy.jar and check the decompiled code.
  And if you want to go deeper, make your own jar file from the decompiled code [There is around 12 class file, easy to copy].

• If you want to generate your own activation code without visiting https://ckey.run , follow the python code of https://​www.xuzhengtong.com​/2022/07/25/ja-netfilter/ja-netfilter-plugins-power

• If you generate your own activation code dont forget to modify power.conf. In that file, x,y,z->fakeResult you need to
  modify x and fakeResult.