[APP] Privoxy for Windows RT - Windows RT Development and Hacking

Hey guys.
I've recompiled Privoxy for Windows RT.
To use this, start the proxy (or install it as a service -- see Privoxy's user guide) and configure IE to use localhost:8118 (by default) as your HTTP (and/or HTTPS) proxy.
At this point both the Desktop (if Protected Mode is enabled) and Metro versions of IE won't be able to connect to the internet; run this in an administrator command prompt:
Code:
CheckNetIsolation.exe loopbackexempt -a -n=windows_ie_ac_001
CheckNetIsolation.exe loopbackexempt -a -n=windows_ie_ac_122
(The first line is for Metro IE, second line is for Desktop IE)
Hope this would save you some CPU power from those pesky web ads!

Once you run those, do you need the RT to be jailbreaked?

ctitanic said:
Once you run those, do you need the RT to be jailbreaked?
Click to expand...
Click to collapse
all desktop software except that preinstalled on the tablet needs jailbreak beforehand

Related

Remote Desktop Mobile /console?

With the Windows version of Remote Desktop you can use the CLI switch '/console' to take control of the current console session of the server you are Remote Desktop'ing into as long as its 2003 Server or later. Is this possible with the Remote Desktop Mobile client?
With the Windows version you just start it with 'Start, Run, mstsc.exe /console' and this attempts to connect to the current console session.
Cheers
Andy
ADB100 said:
With the Windows version of Remote Desktop you can use the CLI switch '/console' to take control of the current console session of the server you are Remote Desktop'ing into as long as its 2003 Server or later. Is this possible with the Remote Desktop Mobile client?
With the Windows version you just start it with 'Start, Run, mstsc.exe /console' and this attempts to connect to the current console session.
Cheers
Andy
Click to expand...
Click to collapse
to my knowledge, not possible - at least I haven't managed to do it . Also see http://forum.xda-developers.com/showthread.php?t=288506
note that if you don't strictly need RDP, some other, proprietary clients do offer console-like features - also see the above article for more info
This is an old topic, but one of the first Google search results for 'Remote Desktop Mobile connect to console'. I've been fiddling with this for the past few days and wanted to share my experience. I say experience because I haven't reallydone anything to achieve a /console connection with RDP mobile.
I'm running WinMo 6.5 Pro and using the standard RDP client it ships with. I am connecting to my home PC, which is running Win7x64 Ultimate. If I choose to log in as a currently logged in user and provide the proper credentials, I am connected to the existing session without any hassle.
I don't know if this is a new feature of terminal services/remote desktop on Win7, or a designed advantage of the mobile RDP client.
If you need to connect to a server console session specifically, take a look at this link on how to configure your server in advance to facilitate this:
EDIT: I'd post a link, but apparently my account is too new to do so. Oh well.

Java Script + Session Cookies enabled Browser?

Hi,
I am trying to find out if there is a way to run thie IG Index's IPhone trading platform on Windows Mobile 6.
The platform can be found under this address:
http://www.igindex.co.uk/dealing/lt/home.htm?locale=en_GB&webSiteId=igi
When I try to log in I get a message from the website:
"We have detected your browser is not setup to allow Session Cookies"
I enabled them in my standard WM6 browser but with no luck. I also know that the platform is using Java Script.
I would be gratefull for your advise.
Swav

LAN File Sync Tool Needed

Hey there!
So I switched my server from linux over to windows (hdmi audio driver issues with ion2, don't ask) and can no longer use Rsync to sync files (unless of course you know of a way to do this in windows)
I am looking for a tool that allows for LAN syncing of files on my Windows desktop to my android device. I know there are tons (box.net, Mozy, SugarSync, etc) that do this however they push files to the cloud. I do not want this. I want a simple LAN sync tool, any personal faves are welcomed!
Thanks in advance!
I'm using freeFTPd as my daemon on the windows box and andFTP as my client on the device. This is the closest I can get to rsync and I think it's the best possible solution right now.
I like rsync for android:
https://market.android.com/details?id=eu.kowalczuk.rsync4android&feature=search_result
It would require opensshd on your windows box. You can get that at:
http://sshwindows.sourceforge.net/
There's a thread on it here:
http://forum.xda-developers.com/showthread.php?t=871307&highlight=rsync
rsync over ssh does not require the rsync daemon, so you should be good to go there, though cygwin does provide rsync if you just had to have it on the windows side.
Also, linux to windows? eww.

[Q] Hacking Windows RT to Run Desktop Apps?

Obviously no one has a had a chance to try this yet, but will there be an effort to hack Windows RT to enable more desktop applications? I really don't care about the desktop, but there's one tiny utility that would be extremely useful. I use a program from Microsoft called "Mouse Without Borders" to control two computers with one keyboard and mouse. I'd love to do this on the Surface RT I'll be buying, but of course because it's a desktop application, I probably won't be able to.
revxx14 said:
Obviously no one has a had a chance to try this yet, but will there be an effort to hack Windows RT to enable more desktop applications? I really don't care about the desktop, but there's one tiny utility that would be extremely useful. I use a program from Microsoft called "Mouse Without Borders" to control two computers with one keyboard and mouse. I'd love to do this on the Surface RT I'll be buying, but of course because it's a desktop application, I probably won't be able to.
Click to expand...
Click to collapse
Compiling desktop apps for ARM using VS 2012 gives an error message, but it can be bypassed. Not sure if the results will run in Windows RT though.
Of course there's no way to find out until Windows RT devices are released to the public, because everyone who has access to one is under NDA. Have some patience.
for what you are suggesting, i believe it is technically either impossible or reliant on an emulator. since windows RT is for ARM processors and normal windows is for x86 processors, instructions would need to be converted from x86 to ARM in order to be used. this would be the job of an emulator, which would most likely not be able to be integrated deeply enough in the OS to do what you are talking about. even if it was, it would run slower than optimal.
now if microsoft releases the source code for their application (very unlikely), its an entirely different story. then the code can be recompiled for an ARM processor, making anything possible.
someone correct me if im wrong, but i believe im correct.
Pseudonym117 said:
for what you are suggesting, i believe it is technically either impossible or reliant on an emulator. since windows RT is for ARM processors and normal windows is for x86 processors, instructions would need to be converted from x86 to ARM in order to be used. this would be the job of an emulator, which would most likely not be able to be integrated deeply enough in the OS to do what you are talking about. even if it was, it would run slower than optimal.
now if microsoft releases the source code for their application (very unlikely), its an entirely different story. then the code can be recompiled for an ARM processor, making anything possible.
someone correct me if im wrong, but i believe im correct.
Click to expand...
Click to collapse
As someone who has one of these devices, I can't say much more other than it will not happen, I am sorry. You'll need to start barking at the developer to make a ARM Compatible App... Not likely it will happen as the API's are very different.
lseidman said:
As someone who has one of these devices, I can't say much more other than it will not happen, I am sorry. You'll need to start barking at the developer to make a ARM Compatible App... Not likely it will happen as the API's are very different.
Click to expand...
Click to collapse
You have an ARM device? If so, can you say 100% that there is no way to target win32/desktop using new code? It would be great to know for sure. I know it's possible to compile desktop code that targets ARM, producing a certain mystery executable. The only question is, will it actually run?
I have an arm device running WindowsRT. I compiled a HelloWorld for arm no problem in VS2012.
Unfortunately it will not run. Get 'Windows cannot verify the digital signature for this file'
If anyone knows a workaround to this we might be able to get it working
xanderkaiber said:
I have an arm device running WindowsRT. I compiled a HelloWorld for arm no problem in VS2012.
Unfortunately it will not run. Get 'Windows cannot verify the digital signature for this file'
If anyone knows a workaround to this we might be able to get it working
Click to expand...
Click to collapse
well the simple way would be to sign it. HOW to sign it is a completely different problem... there may be a group policy change or registry edit to turn off signature verification, but i am not familiar with windowsRT at all.
phailyoor said:
You have an ARM device? If so, can you say 100% that there is no way to target win32/desktop using new code? It would be great to know for sure. I know it's possible to compile desktop code that targets ARM, producing a certain mystery executable. The only question is, will it actually run?
Click to expand...
Click to collapse
How did you bypass the error message in VS2012? Can you share the exact steps you took to bypass the error as well as your mystery executable here so that folks who are under NDA and have early access to the ARM devices can try it out?
Since Office RT is a desktop app, one can only assume all of this is possible.
Windows RT is basically just Win8 recompiled for ARM, with one major exception: EXE files need to be signed by Microsoft before they will run. This means that MS can release desktop apps just fine - they have the signing keys, after all - but third-party software can't run by itself (as a desktop app) and will need to be bundled as an .APPX file (Metro-style app bundle).
If you want to try bypassing the signature check, there are a few things you could attempt. One would be to create your own signing certificate, install the public key in the OSes root code signing cert store (not the per-user store, though it qprobably wouldn't hurt to install it there too), and then sign your test apps with that cert. MS *probably* used certificate pinning - where a specific cert is used, rather than just any cert present in the OS of sufficient trust level - but they may not have, too. Alternatively, you could try looking for some legacy or debug functionality to disable the code-signing. Finally, you coul try using a built-in program, rundll, to invoke your applications.
I can't test any of this right now, because I don't have an RT device. There's a lot of research on them that I want to do, though.
Quote from one very old MS Windows 8 document, from those times when windows RT was called "woa" (2011). Everything could have changed from those days.
Description of the change:
WOA platforms will require that all desktop binary images be signed with a trusted Microsoft certificate. Any unsigned code will fail to load. This document describes the technical steps required to enable unsigned test, development, or manufacturing applications to run. This document does not cover Metro Style applications for which there is a separately documented signing requirement and developer licensing.
Action required
In order for any test binary or tool to run on WOA platforms you must do one of the following:
· Register the install location of your test binaries as an exclusion path, OR
· Attach a Kernel Debugger and disable checking by setting the appropriate registry value
...cut...
2. Scripts - Scripts will be allowed to run if the script host (e.g. cscript.exe, cmd.exe, etc.) is Microsoft signed or is run under an exclusion path.
...cut...
How to register your test binaries in an exclusion path
...cut...
Exclusion paths are listed in the following registry key in REG_MULTI_SZ format:
Key: HKLM\SYSTEM\CurrentControlSet\Control\CI\TRSData
Value: TestPath
Paths added to this key should be in one of two formats:
1. Path (recursive): \Program Files\TestAutomationPath
2. Binary (specific): \Program Files\TestAutomationPath\mybinary.exe
Note: Do not include the drive letter of the volume. Each path will be excluded across all volumes.
...cut...
The following paths are restricted and cannot be added as an exclusion:
1. \
2. \Windows
3. \Windows\System32
4. \Program Files
...cut...
How to disable signature verification with an attached Kernel Debugger
To disable signing verification when a Kernel Debugger is attached the “DebugFlags” value must be deleted from the “HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\CI” registry key and the system must be rebooted. After this Signing Verification will not take place.
This can be scripted by putting the following in a .cmd script and executing with admin privilege:
cmd /c reg delete "HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\CI" /v DebugFlags /f
shutdown -r -t 0
...cut...
Note: Enabling Kernel Debug will not be allowed by default on machines with Secure Boot enabled. Either Secure Boot will need to be disabled, or during boot the F8 menu selection to EnableDebugging must be chosen.
...cut...
At a later point, changes will be made to Windows 8 builds which will enforce that only machines configured as “Debug System” will support exclusion paths.
A “Debug System” is will initially be identified by the presence of the Microsoft Test Signing CA in the UEFI signature database (“db”).
...cut...
Note: If there is a need to run unsigned tools, the system can be configured as a “Debug System” during manufacturing but there must be a step in the production process that removes the Microsoft Test CA.
Production machines must not ship with the Microsoft Test CA in the db.
Click to expand...
Click to collapse
First we need to get hands on ARM device. I'd recommend Qualcomm-based, as chinese friends regularly leak their docs/sources. MS Surface is Tegra-based, so don't buy it
And one more thing:
This document “Enabling Debug Mode for Development, Manufacturing, and Support of Windows RT Devices” discusses placing a production device into ‘Debug Mode’ is accomplished by creating a per device Windows Debug Policy using tools provided by Microsoft.
Click to expand...
Click to collapse
Unfortunately I don't have “Enabling Debug Mode...” document, as I don't have access to connect.microsoft.com. Anyway it would not be helpful for us, end-users.
So to turn on a device to debug mode - you'll need a special "something" that is signed for your particular device. Sign is based on 2048-bit key, so you can't bruteforce it. But you can try to hack UEFI. UEFI is partially opensourced, so you can start to study its code now from edk2.sf.net
And one more way. Remember the test signing mode in Win7+. It is still present in Win8. Turn it on via bcdedit on your RT-device, use your own certificate to sign your driver or your program, ..., profit.
But be careful when hacking. There are known problems with BitLocker when test signing mode is on. The OS simply would not boot. Lets hope that we could disable BitLocker on our devices...
Just tried editing the registry to add a testing path. Didnt work
Still asks for certificate
xanderkaiber said:
Just tried editing the registry to add a testing path. Didnt work
Click to expand...
Click to collapse
According to MS document - this would work only on "debug mode"/"debug system" devices.
Can you turn on the test-signing mode:
Code:
In elevated CMD type:
bcdedit.exe /set {globalsettings} testsigning Yes
bcdedit.exe /set {bootmgr} testsigning Yes
bcdedit.exe /set {current} testsigning Yes
and try to sign your app with your own certificate I hope that test signing is still present on WinRT.
But first check that you are not using BitLocker (the "get-bitlockerVolume" command in admin's powershell). According to MS docs the retail device would not boot in this case (this info is taken from windows phone 8 "portico" docs, so may be unrelated to WinRT devices).
danchar4 said:
How did you bypass the error message in VS2012? Can you share the exact steps you took to bypass the error as well as your mystery executable here so that folks who are under NDA and have early access to the ARM devices can try it out?
Since Office RT is a desktop app, one can only assume all of this is possible.
Click to expand...
Click to collapse
Theres some info on the web somewhere for a config change to VS2012 that lets it build ARM desktop apps
Not that you can run them due to the signing issues
http://stackoverflow.com/questions/...op-programs-be-built-using-visual-studio-2012
I did it!
I managed to build and run a windows application for arm! Just turned on test signing and signed it with my own cert, then compiled for ARM in vs2012 and it ran
Definitely a good sign
xanderkaiber said:
I did it!
I managed to build and run a windows application for arm! Just turned on test signing and signed it with my own cert, then compiled for ARM in vs2012 and it ran
Definitely a good sign
Click to expand...
Click to collapse
Working on the surface?
Sent from my SCH-I535 using Tapatalk 2
eorsini said:
Working on the surface?
Sent from my SCH-I535 using Tapatalk 2
Click to expand...
Click to collapse
Not a surface, a Qualcomm engineering sample device. But I imagine it would definitely work on the surface also.
xanderkaiber said:
I managed to build and run a windows application for arm! Just turned on test signing and signed it with my own cert, then compiled for ARM in vs2012 and it ran
Click to expand...
Click to collapse
Great news
Seems that turning on the test-sign mode would soon be a must on ARM devices, at least for those of us who need programs like VLC player, DosBox, FAR manager and so on.
As far as I can see, you could port pretty much anything (as long as it's c++) if you can get the source code.
Might give VLC a try now
Doesn't seem like a very good solution to me though.
While it's nice that progress is made, I think that running unsigned apps should be the primary focus - Microsoft could revoke the keys at any time.

[Q] Running Windbg/cdb on Surface RT Window 8.1 Preview

As was discussed here, you are no longer able to run the Arm debugging tools in Windows RT 8.1 Preview. I tried cdb version 6.2.9200.16398 and 6.3.9431.0 with no success.
According to Netham45, he was able to run cdb/Windbg but was unable to attach to csrss. I'm working on a jailbreak technique that involves modifying two DWORDs in a different, non-privileged process but without the ability to attach to another process in non-invasive mode and the ability to modify two DWORDs at a fixed location in the .data section, I won't be able to run my jailbreak in Windows RT 8.1 Preview.
As soon as I get this technique working in 8.1 Preview, I would be happy to share it.
FYI, the ARM debugging tools are now publicly available in the WDK 8.1 Preview
OK. I figured it out. You need to install the Windows 8.1 Preview WDK and do the following:
From an elevated command prompt: cd "%ProgramFiles(x86)%\Windows Kits\8.1\bin\arm\SecureBoot"
Run InstallKitsPolicy.cmd
Allow your Surface RT to reboot. When the machine reboots, follow the instructions on the screen. Use the Volume Down button to select Accept and install and then press the Windows button to accept the agreement terms.
You may now use cdb/Windbg (Windows RT 8.1 Preview versions) on your Surface RT.

Categories

Resources