Skip to content

WUTNet v1.3.2 — field-verified Windows captive-portal automation

Choose a tag to compare

View all tags
@styayur styayur released this 09 Oct 13:02
· 3 commits to main since this release
v1.3.2
b27cd3c
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

WUTNet v1.3.2 — field-verified Windows captive-portal automation

The first stable Windows release backed by reported end-to-end WHUT authentication and scheduled reconnect tests on Windows 11 with PowerShell 7.6.6 Core.

  • Support the real /api/r/<nasId> bootstrap: validate it, replay it in the cookie jar, then open the canonical login page.
  • Discover campus-specific nasId, userip, acip and acname dynamically across observed WHUT/BRAS environments.
  • Select physical WLAN despite Meta/TUN routing; exclude APIPA/benchmark addresses and use the bootstrap user IP as an exact physical-interface hint.
  • Parse active config.js API declarations without mistaking comments for assignments; deduplicate equal paths and reject distinct paths or unsafe API bases.
  • Resolve the stable Microsoft Store PowerShell alias into a scalar Task Scheduler executable, with safe fallbacks and quoted script arguments.
  • Preserve full success verification: login response, account-online confirmation and Internet recovery. Online status/auto and scheduled reconnect authentication are field-verified.
  • Allow explicit registration of multiple physical networks with setup -AddNetwork. Config v3 uses trustedNetworks[]; existing v2 single-network configurations migrate automatically without changing the account or encrypted credential. Profile/SSID names never enroll a network.
  • Retain DPAPI CurrentUser, late decryption, dedicated POST buffers, redacted errors, strict host/path checks and bounded multi-probe discovery.

Usage

.\whut-net.ps1 setup -Username <student-id>
.\whut-net.ps1 diagnose
.\whut-net.ps1 login
.\whut-net.ps1 install

Connect to another WHUT network and run setup -AddNetwork to retain both registrations. Normal setup resets the trust list to the current network. Re-run install after moving the script.

Validation

The maintainer's field record covers real bootstrap, multiple campus environments, TUN coexistence, config/CSRF/cookies, credential login, account/Internet verification, idempotent auto, task installation and reconnect-triggered login without a browser. Multiple-registration enrollment/migration introduced during release preparation is covered by offline regression; no additional live multi-registration campus-switch test is claimed.

Release gates include PowerShell parsing, dependency-free offline regression, history/local-state secret checks, version/document consistency, clean Git state and CI. Assets are whut-net.ps1 and SHA256SUMS.txt.

Limitations

WHUT currently uses HTTP; DPAPI protects credentials at rest only. Future portal schemas may change. Runtime/HTTP-stack copies cannot be guaranteed immediately erased. Fingerprints do not cryptographically authenticate the server. This release's client is Windows-only and requires PowerShell 7.2+ Core; Android is unchanged. No GUI, daemon, CAPTCHA solver, VPN manager or cloud service is added.

Assets 4
Loading