opexxx
11/10/2016 - 2:29 PM

Small PS script to configure a new Windows 7 client to be a Cuckoo guest (AKA Totally not secure)

Small PS script to configure a new Windows 7 client to be a Cuckoo guest (AKA Totally not secure)

# Disable Windows Update
Set-Location "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update"
Set-ItemProperty . NoAutoUpdate 1

# Disable IPv6
Set-Location "HKLM:\SYSTEM\CurrentControlSet\Services\Tcpip6\Parameters"
Set-ItemProperty . DisabledComponents 0

# Disable Firewall
Set-Location "HKLM:\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile"
Set-ItemProperty . EnableFirewall 0
Set-Location "HKLM:\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile"
Set-ItemProperty . EnableFirewall 0
Set-Location "HKLM:\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile"
Set-ItemProperty . EnableFirewall 0

# Disable UAC
Set-Location "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System"
Set-ItemProperty . EnableLUA 0

# Disable welcome to IE popup
Set-Location "HKLM:\SOFTWARE\Microsoft\Internet Explorer\MAIN"
Set-ItemProperty . DisableFirstRunCustomize 1

# Disable Java automatic Update
if ([System.IntPtr]::Size -eq 4) { 
	Set-Location "HKLM:\SOFTWARE\JavaSoft\Java Update\Policy"
} else { 
	Set-Location . "HKLM:\SOFTWARE\Wow6432Node\JavaSoft\Java Update\Policy"
}
Set-ItemProperty . EnableJavaUpdate 0

# Disable DEP
bcdedit.exe /set nx AlwaysOff


# Install acroread 9.4.0
$source = "ftp://ftp.adobe.com/pub/adobe/reader/win/9.x/9.4.0/en_US/AdbeRdr940_en_US.msi"
$destination = "$env:temp\AdbeRdr940_en_US.msi"
$wc = New-Object System.Net.WebClient
$wc.DownloadFile($source, $destination)
Start-Process "$env:temp\AdbeRdr940_en_US.msi" /qn -Wait

# Install flash player 11.7.700.260 for IE
$source = "http://fpdownload.macromedia.com/get/flashplayer/current/licensing/win/install_flash_player_11_7_active_x.msi"
$destination = "$env:temp\install_flash_player_12_active_x.msi"
$wc = New-Object System.Net.WebClient
$wc.DownloadFile($source, $destination)
Start-Process "$env:temp\install_flash_player_12_active_x.msi" /qn -Wait