OcttKB Cross-Repo Sync (HTML to Raw)

This commit is contained in:
octospacc 2023-06-03 23:45:17 +00:00
parent 3ed5f7c697
commit 6acfc1b6bc
8 changed files with 53 additions and 11 deletions

View File

@ -1,6 +1,6 @@
created: 20230111153758951
creator: Octt
modified: 20230531082831421
modified: 20230603231347845
modifier: Octt
tags: $:/i18n:en UNIX
title: Linux
@ -21,6 +21,8 @@ title: Linux
* LDP (obsolete?)
** [[The Network Administrators' Guide|https://tldp.org/LDP/nag/]]
* [[SquashFS|https://tldp.org/HOWTO/SquashFS-HOWTO/whatis.html]], [[DwarFS|https://github.com/mhx/dwarfs]]
!! ''Tools''
* [[Flatpak|https://flatpak.org/]] --- //Linux application sandboxing and distribution framework// --- <<[ "[[Git|https://github.com/flatpak]]">>
@ -28,3 +30,4 @@ title: Linux
* [[Wine|https://www.winehq.org/]] --- //Compatibility layer for running Windows applications on POSIX-compliant systems//
** [[WineZGUI|https://github.com/fastrizwaan/WineZGUI]] --- //Wine GUI using Zenity - Play and Share!// --- <<#[ Flatpak "https://github.com/fastrizwaan/flatpak-wine">>

View File

@ -0,0 +1,38 @@
created: 20230603231547125
creator: Octt
modified: 20230603234352061
modifier: Octt
tags:
title: SEB 3.5.0 on Linux (VM Bypass)
Having the need of running Safe Exam Browser while I've only got GNU+Linux on my laptop and desktop, I had to look for alternative solutions.
* There is no linux-native full SEB application, it's only for Windows and macOS.
* Running SEB on WinPE is unfeasible as it needs to install many runtime dependencies, it's too slow to do that while booted into the live system, and on my 4 GB laptop the ramdisk is not big enough.
* SEB by default detects and blocks virtual machines.
** This option can be changed in the local configuration file, but when starting an exam the configuration loaded from the server takes precedence over the local one.
** SEB 3.5.0 added an hard-to-break anti-tampering mechanism, where the LMS server verifies if the client is altered and won't let you take exams; patching the few needed modules won't work.
Turns out only way to work around the issue is to make a relatively stealth VM.
By analyzing the SEB for Windows source code, we can see some important files and methods:
* [[VirtualMachineDetector.cs:IsVirtualMachine()|https://github.com/SafeExamBrowser/seb-win-refactoring/blob/11b10e8e4524c1fe65b6c3db7d12e172facf322c/SafeExamBrowser.SystemComponents/VirtualMachineDetector.cs#L49]]: Clearly the main place where VM detection is happening
Also, by referring to various strings in the source code and [[issue #268|https://github.com/SafeExamBrowser/seb-win-refactoring/issues/268#issuecomment-994586854]], we can see that in VMs a bug occurs where 0 displays are detected. This must be accounted for after succeeding in concealing the VM from the program. A good start is in this class and method, which checks for displays and throws errors if necessary:
* [[DisplayMonitorOperation.cs:CheckDisplayConfiguration()|https://github.com/SafeExamBrowser/seb-win-refactoring/blob/11b10e8e4524c1fe65b6c3db7d12e172facf322c/SafeExamBrowser.Runtime/Operations/DisplayMonitorOperation.cs#L51]]
[TODO]
!! VM Setup
We choose VMWare Workstation 17 (latest version) as it lets a few important options be customized. First I created a VM with close-to-suggested settings (the primary ones don't matter here).
Then I modified the network card settings [TODO]
After this, I installed Windows 10 (a build from 2019 I have on a burned DVD always at hand). No VMWare tools have been installed.
!! Hardening Windows
[TODO] (https://pastebin.com/XEn7BykP)

View File

@ -1,6 +1,6 @@
created: 20230223222804008
creator: Octt
modified: 20230508214437798
modified: 20230603231144329
modifier: Octt
tags:
title: Saved/Sites
@ -34,4 +34,5 @@ Some personal ones could be defined as "[[digital gardens|Digital Garden]]".
* [[XXIIVV|https://wiki.xxiivv.com/]] --- <<[ "[[Git|https://github.com/XXIIVV/oscean]]">>
!!! Mess-leaning <small>(often the most creative)</small>
*
* [[samy.pl|https://samy.pl/]] - Website full of easter eggs by the same <<YoutubeL OJ1pEAdFLP8 "person who once hacked MySpace">>.
** One easter egg is the client source code is hidden as a binary-encoded string represented by spaces and tabs; The server providing the data uses something (headers? but also other stuff) to only serve the real HTML to a browser; curl/wget without all the browser headers (and a browser after a reload in `view-source:` ?) get a fake HTML. <<#[ "Older but more in-depth analysis" "https://t.me/ioctt/19280">>

View File

@ -1,5 +1,5 @@
created: 20230531090933916
created: 20230603234517343
current-tiddler: GettingStarted
modified: 20230531090933916
modified: 20230603234517343
title: $:/HistoryList
type: application/json

View File

@ -1,3 +1,3 @@
created: 19700101000000000
modified: 20230531083553000
modified: 20230531091416000
title: $:/OcttKB/Empty

View File

@ -1,6 +1,6 @@
created: 20230531084618560
created: 20230603230410011
creator: Octt
list:
modified: 20230531090701650
modified: 20230603234429443
modifier: Octt
title: $:/StoryList

View File

@ -1,6 +1,6 @@
created: 20220920174307633
creator: Octt
modified: 20230501102541769
modified: 20230603231205114
modifier: Octt
title: $:/state/sidebar

View File

@ -1,7 +1,7 @@
created: 20220920092307479
creator: Octt
modified: 20230531085755129
modified: 20230603234428531
modifier: Octt
title: $:/state/tab/sidebar--595412856
OcttKB/Index
$:/core/ui/SideBar/Recent