Category Archives: Windows

← Older posts
15
09
25
 1 Comment

Using Frida to hook Win API calls

Posted by | Python, Win32, Windows | 
python -m pip install frida-tools

Collecting frida-tools
  Downloading frida-tools-14.4.5.tar.gz (4.7 MB)
     ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 4.7/4.7 MB 2.8 MB/s  0:00:01
  Installing build dependencies ... done
  Getting requirements to build wheel ... done
  Preparing metadata (pyproject.toml) ... done
Requirement already satisfied: colorama<1.0.0,>=0.2.7 in c:\dev\tools\python313\lib\site-packages (from frida-tools) (0.4.6)
Collecting frida<18.0.0,>=17.2.8 (from frida-tools)
  Downloading frida-17.2.17-cp37-abi3-win_amd64.whl.metadata (2.3 kB)
Collecting prompt-toolkit<4.0.0,>=2.0.0 (from frida-tools)
  Downloading prompt_toolkit-3.0.52-py3-none-any.whl.metadata (6.4 kB)
Collecting pygments<3.0.0,>=2.0.2 (from frida-tools)
  Downloading pygments-2.19.2-py3-none-any.whl.metadata (2.5 kB)
Collecting websockets<14.0.0,>=13.0.0 (from frida-tools)
  Downloading websockets-13.1-cp313-cp313-win_amd64.whl.metadata (7.0 kB)
Collecting wcwidth (from prompt-toolkit<4.0.0,>=2.0.0->frida-tools)
  Downloading wcwidth-0.2.13-py2.py3-none-any.whl.metadata (14 kB)
Downloading frida-17.2.17-cp37-abi3-win_amd64.whl (41.8 MB)
   ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 41.8/41.8 MB 10.6 MB/s  0:00:04
Downloading prompt_toolkit-3.0.52-py3-none-any.whl (391 kB)
Downloading pygments-2.19.2-py3-none-any.whl (1.2 MB)
   ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 1.2/1.2 MB 10.4 MB/s  0:00:00
Downloading websockets-13.1-cp313-cp313-win_amd64.whl (159 kB)
Downloading wcwidth-0.2.13-py2.py3-none-any.whl (34 kB)
Building wheels for collected packages: frida-tools
  Building wheel for frida-tools (pyproject.toml) ... done
  Created wheel for frida-tools: filename=frida_tools-14.4.5-py3-none-any.whl size=4699595 sha256=115f2de0f912d70ee9eed25c26b0460f4fe24213359dd46a0ffec3e96e24c911
  Stored in directory: c:\users\dmitr\appdata\local\pip\cache\wheels\a6\b2\fb\eff238e22a7ceffee8c7a366ce7ff4011af13c77a103f870d4
Successfully built frida-tools
Installing collected packages: wcwidth, websockets, pygments, prompt-toolkit, frida, frida-tools
   ━━━━━━━━━━━━━╺━━━━━━━━━━━━━━━━━━━━━━━━━━ 2/6 [pygments]  WARNING: The script pygmentize.exe is installed in 'C:\dev\tools\Python313\Scripts' which is not on PATH.
  Consider adding this directory to PATH or, if you prefer to suppress this warning, use --no-warn-script-location.
   ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━╺━━━━━━ 5/6 [frida-tools]  WARNING: The scripts frida-apk.exe, frida-compile.exe, frida-create.exe, frida-discover.exe, frida-itrace.exe, frida-join.exe, frida-kill.exe, frida-ls-devices.exe, frida-ls.exe, frida-pm.exe, frida-ps.exe, frida-pull.exe, frida-push.exe, frida-rm.exe, frida-trace.exe and frida.exe are installed in 'C:\dev\tools\Python313\Scripts' which is not on PATH.
  Consider adding this directory to PATH or, if you prefer to suppress this warning, use --no-warn-script-location.
Successfully installed frida-17.2.17 frida-tools-14.4.5 prompt-toolkit-3.0.52 pygments-2.19.2 wcwidth-0.2.13 websockets-13.1
(more…)
08
09
25
 2 Comments

Accessing Hyper-V from WSL

Posted by | Windows | Tagged , |

Forwarding is disabled by default:

Get-NetIPInterface | Select-Object ifIndex,InterfaceAlias,ConnectionState,Forwarding

ifIndex InterfaceAlias                     ConnectionState Forwarding
------- --------------                     --------------- ----------
     57 vEthernet (WSL (Hyper-V firewall))       Connected   Disabled
     38 vEthernet (Default Switch)               Connected   Disabled
     17 Ethernet 2                            Disconnected   Disabled
     14 Local Area Connection* 10             Disconnected   Disabled
     22 Local Area Connection* 9              Disconnected   Disabled
     18 OpenVPN Connect DCO Adapter           Disconnected   Disabled
      7 Wi-Fi                                    Connected   Disabled
      5 Local Area Connection                 Disconnected   Disabled
      1 Loopback Pseudo-Interface 1              Connected   Disabled
     57 vEthernet (WSL (Hyper-V firewall))       Connected   Disabled
     38 vEthernet (Default Switch)               Connected   Disabled
     17 Ethernet 2                            Disconnected   Disabled
     14 Local Area Connection* 10             Disconnected   Disabled
     22 Local Area Connection* 9              Disconnected   Disabled
     18 OpenVPN Connect DCO Adapter           Disconnected   Disabled
      7 Wi-Fi                                    Connected   Disabled
      5 Local Area Connection                 Disconnected   Disabled
      1 Loopback Pseudo-Interface 1              Connected   Disabled
(more…)
04
09
25
 Leave a comment

Exporting and importing WSL distributions

Posted by | Ubuntu, Windows | Tagged |

Exporting

In PowerShell:

wsl --export Ubuntu Ubuntu-01.tar

where Ubuntu is the distro name.

Importing

wsl --import UbuntuA C:\Users\dmitriano\wsl\UbuntuA Ubuntu-24.01.tar

probably the folder C:\Users\dmitriano\wsl\UbuntuA should exist.

(more…)
03
09
25
 6 Comments

Using Apache JMeter to measure LDAP performance

Posted by | Ubuntu, Windows | Tagged , |

Extract the archive:

tar xf /mnt/c/Users/dmitriano/Downloads/apache-jmeter-5.6.3.tgz

Install Java runtime:

sudo apt install default-jre
java --version

openjdk 21.0.8 2025-07-15
OpenJDK Runtime Environment (build 21.0.8+9-Ubuntu-0ubuntu124.04.1)
OpenJDK 64-Bit Server VM (build 21.0.8+9-Ubuntu-0ubuntu124.04.1, mixed mode, sharing)
(more…)
28
08
25
 4 Comments

How Russians use CLion with WSL on Windows 11

Posted by | Development environments, Windows | Tagged |

Configuring WSL

First they run a VPN client on the host machine and then they go to user’s folder:

cd %UserProfile%

create .wslconfig file with the following content:

[wsl2]
memory=30GB
swap=10GB

networkingMode=mirrored
dnsTunneling=true
autoProxy=true
(more…)
27
08
25
 1 Comment

Running v2rayN client on WSL

Posted by | Ubuntu, Windows | Tagged | 
unzip /mnt/c/Users/dmitr/Downloads/v2rayN-linux-64.zip
sudo apt install libice6 libsm6
./v2rayN &
curl -s https://api.ipify.org
(more…)
27
08
25
 1 Comment

Increasing WSL2 memory limits

Posted by | Windows | Tagged |

Go to user’s folder:

cd %UserProfile%

create .wslconfig file with the following content:

[wsl2]
memory=30GB
swap=10GB
(more…)
25
08
25
 Leave a comment

Investigating LDAP SASL with WireShark

Posted by | Windows | Tagged |

LDAP SASL, or Simple Authentication and Security Layer for LDAP, is a framework providing a unified way to authenticate clients to LDAP servers using various security mechanisms, such as Kerberos, GSSAPI, or PLAIN.

GSSAPI, or the Generic Security Services API, is a standardized framework that provides a way for applications to access security services, like authentication, in a mechanism-independent manner.

Installing ldp.exe

(more…)
25
08
25
 Leave a comment

Joining a Windows 10 computer to a Domain

Posted by | Windows |

Win + R, control:

(more…)
22
08
25
 Leave a comment

Investigating Kerboros with kinit and Wireshark

Posted by | Ubuntu, Windows | Tagged , , |

On the domain controller:

nslookup -q=SRV _kerberos._tcp.other.local

Server:  localhost
Address:  127.0.0.1

_kerberos._tcp.other.local      SRV service location:
          priority       = 0
          weight         = 100
          port           = 88
          svr hostname   = 7-dev-de-dc16.other.local
7-dev-de-dc16.other.local       internet address = 10.15.7.16
(more…)
← Older posts