Oct 312017
modified : dns proxy will read entries from config.ini (section=hostname,ident=ip), no more from hosts file
added : right click open config.ini
added : right click open root_path
fixed : share folder will now add everyone read-only on share permissions
added : share is created with STYPE_TEMPORARY flag, i.e will not survive a reboot
added : TPS will answer to specific ‘discovery’ messages (see discover.zip)
fixed : wsMinimized=1 was preventing form_show and load_config
added : each daemon will report on which ip it is listening (useful to troubleshoot)
added : syslogd will read ip under [syslog] in config.ini if one wants to bind to a specific interface (instead of by default)
fixed : error handling in log_memo to avoid a possible date bug
fixed : httpd could not list files/folder in a non indexed folder
modified : ucimp.pas uses winsock, not wsck
modified : iphlpapi_helper.pas uses winsock, not wsck
modified : usnoop uses winsock, not wsck
modified : iptypes uses winsock, not wsck
modified : removed ipheader unit in main form
modified : TPS does not use wsck unit anymore

Discuss it here.
Download here.

 Posted by at 20 h 12 min
Oct 312017
added : new option wsMinimized in config.ini to start the app minimized
fixed : @mac,@ip,@arch added to dhcp_offer (was only dhcp_ack before)
fixed : pool start correct when opt54 set in ini file
todo : send arch in dhcp offer
added : @opt54 variable next to @mac,@ip,@arch -> similar to ${next-server} in ipxe
fixed : next server passed to send_dhcpoffer and send_dhcpack
added : will add a scrollbar when active monitor height <=600 added : vscroll=1 in config.ini will force a vertical scrollbar fixed : option 6 dns server was wrong when choosing a different NIC added : arch will be taken into account in the dhcp offer as well fixed : tftpd can be disabled again in config.ini added : will select the active nic in the opt54 combo box modified : 2 more fields hidden and moved to the advanced part of the form fixed : log to file is disabled added : a syslog server is included in the zip file (syslog= in the config.ini) Discuss it here.
Download here.

 Posted by at 20 h 10 min
Oct 312017
added : root can be an http url (netboot for debian, ubuntu, …)
fixed : stream.free on udp transfer complete
added : can log to a syslog server (add syslog=host in config.ini)
fixed : non critical udp socket errors would stop the dhcp daemon
added : in analysedata, will exit loop as soon as a dhcp message is found
added : in analysedata, will prevent (byte)offset>255
added : offline button will terminatethread if still active (53,67,4011)
fixed : no more high cpu usage on random occasions
added : new options skip_dhcp_inform & skip_dhcp_discarded
added : forcerenew dhcp messages logged

Discuss it here.
Download here.

 Posted by at 20 h 09 min
Mai 062017

Under some specific circumstances, it might be handy to run as system.
RunAsSys will launch a process as the local system account.
This require local admin rights.

Download it here.

 Posted by at 16 h 21 min
Mai 062017

DiskMgr has been developed primarily for use in a Windows Forensic Environment (WinFE) to provide a user friendly method of changing the following DISK attributes : Offline, Online, Read-Only, Read-Write.

DiskMgr is similar in use to Colin Ramsden’s « Write Protect » application (see here). DiskMgr is available in native Windows 32-bit and 64-bit versions.

Discuss and download here


 Posted by at 15 h 44 min
Avr 142017

In this post, I shared a quick tool to convert VMDK files to RAW files.
The interface was rather minimalist and limited.
Here comes an updated version which can convert multiple files format (VMDK, VHDI, EWF, VDI) to RAW image disks.

Download it here.

 Posted by at 19 h 06 min
Fév 112017

Following a post from 2014 about booting Winpe over PXE on a UEFI computer, see below a different way to proceed.

-Disable secureboot (or else you’ll need to use a signed bootloader)
-Retrieve latest version of IPXE for UEFI, ipxe-snponly-x86-64.efi and rename it bootia64.efi
-run the following command against your BCD : bcdedit.exe /store BCD /set {bootmgr} nointegritychecks yes
-Use the below wimboot.ipxe script based on Wimboot
-set Tiny PXE Server as below screenshot


set boot-url http://${dhcp-server}
kernel ${boot-url}/wimboot
initrd ${boot-url}/bootmgfw.efi bootmgfw.efi
initrd ${boot-url}/EFI/MICROSOFT/BOOT/BCD BCD
initrd ${boot-url}/BOOT/BOOT.SDI BOOT.SDI
initrd ${boot-url}/SOURCES/BOOT.WIM BOOT.WIM

 Posted by at 15 h 26 min
Déc 302016

Christmas time…I bought this nice Xiaomi Mi4C phone for my son for quite a cheap price (considering the hardware).

Little I know that this came with a price : my own sweat 🙂

As this is a chinese phone, this is delivered with an operating system which is full of bloatware (if not spyware).
After some mad googling on different forums, I decided to flash (thru fastboot using MiFlash) a MIUI 8 found on miui forum.
I quickly realised my mistake : not only did the OS miss my french native langage, it was still with lots of bloatware and whatsmore was also missing google apps (that was easy to fix).
Much (much) worse : willing to flash another image, I realised that I had locked the recovery AND fastboot : in short, no way back…except maybe get the unlock code from Xiaomi which can take 2 weeks to come (and sometimes is even denied by Xiaomi).

So here I was with a brand new shiny phone in a poor state (to be fair it was still working nicely even with the bootloader locked and the operating system in english).

Here below the steps I used to remediate to this situation :

1-Put the phone in « emergency download mode » : while in fastboot mode, send fastboot oem edl.

2-At this stage, use MiFlash 2015.10.28 (latest version did not work for me) and flash a fastboot miui image on version 6.1.7 since it contains a non locked fastboot (google search libra_images_6.1.7)

3-Exit the EDL mode (long power press) and let the image install

4-Go back to fastboot mode and send : fastboot oem unlock

5-Still while in fastboot mode, install TWRP (google search twrp libra) : fastboot flash recovery twrp.img / fastboot boot twrp.img

6-Flash a recovery image thru TWRP (i recommend a xiaomi.eu image)

you can check the status of your phone with the fastboot command : fastboot oem device-info.