Lenovo ThinkPad X301

Hacking

Windows

  • BIOS+MBR (BIOS+GPT is not supported in Windows)

  • ThinkVantage System Update – downloads data updates for software, drivers and BIOS from a Lenovo server directly over the Internet without requiring specific user knowledge of where the package is located or if it is needed by the target system (requires Microsoft .NET Framework 4).

  • set DHCPv6 client DUID in

HKEY_LOCAL_MACHINE/SYSTEM/CurrentControlSet/services/TCPIP6/Parameters/Dhcpv6DUID ~~~

Windows 8-10 64-bit

Windows Clean-up

  • disable Volume Shadow Copy (Stínová kopie svazku, in Czech) service and stop System Restore (, in Czech) service

  • perform Windows Update Cleanup

  • limit Windows File Protection cache size (Windows XP/2000/2003 only) by running gpedit.msc and setting Computer ConfigurationAdministrative TemplatesSystemWindows File Protection to enabled with a particular limit in MB

  • remove files from /Windows/SoftwareDistribution/Download

  • disable hibernate file:

powercfg -h off ~~~

  • delete resources associated with mounted WIM images that are corrupt:

dism /Cleanup-Wim ~~~

  • perform clean-up and recovery operations on the running operating system image with removal of backup files created during service pack installation

dism /Online /Cleanup-Image /spsuperseded ~~~

  • perform clean-up and recovery operations on the running operating system image with removal of all superseded versions of every component in the component store (Windows 8.1/2012R2 only)

dism /Online /Cleanup-Image /StartComponentCleanup /ResetBase ~~~

  • perform clean-up on Manifest cache in the component store (winsxs), however, be careful

net stop trustedinstaller takeown /f %windir%/winsxs/ManifestCache/* icacls %windir%/winsxs/ManifestCache/* /GRANT administrators:F del /q %windir%/winsxs/ManifestCache/* ~~~

Linux

Cloning HDD over Network

  • by NTFSClone (need to be terminated after “syncing” message)

destination$ nc -l -p 9000 | ntfsclone –restore-image –overwrite /dev/sda1 - source$ ntfsclone –save-image –output - /dev/sda1 | nc [destination-ip] 9000 ~~~

  • by creating new partitions with the same UUIDs

source$ ls -l /dev/disk/by-uuid/ destination$ mkswap -L swap -U [swap-uuid] /dev/sda2 destination$ mkfs.ext4 -L / -U [/-uuid] destination$ mkfs.ext4 -L /home -U [/home-uuid] ~~~

  • by TAR

destination$ nc -l -p 9000 | tar vxSps source$ tar vcSp . | nc [destination-ip] 9000 ~~~

  • by restoring Grub2 MBR record

destination$ mount /dev/sda3 /mnt/sda3 destination$ mount /dev /mnt/sda3/dev -o bind destination$ mount /proc /mnt/sda3/proc -o bind destination$ mount /sys /mnt/sda3/sys -o bind destination$ chroot /mnt/sda3 /bin/bash destination-chroot$ update-grub2 destination-chroot$ grub-install /dev/sda ~~~

 Share!

 
comments powered by Disqus