Skip to content

WUTNet v1.5.0 — Windows hidden task recovery and PowerShell quality

Latest

Choose a tag to compare

@styayur styayur released this 23 Oct 05:54
76393a2

WUTNet v1.5.0 — Windows scheduled recovery and static analysis

Windows release, 2026-10-23. Android remains the separate experimental v1.4.0 artifact; this release contains no new APK. Historical releases, tags and assets remain unchanged.

Changes

  • install generates a managed UTF-16 VBS launcher under %LOCALAPPDATA%\WHUT-Net, dynamically resolves script/PowerShell/WSH paths, validates a harmless launch, then creates or updates WHUT-Net AutoLogin. wscript.exe hides PowerShell, waits and propagates its exit code. Task Hidden is only a Scheduler visibility setting.
  • Five native triggers: current-user logon (5-second delay), NetworkProfile/Operational 10000 (3 seconds), current-user unlock (3 seconds), System Power-Troubleshooter 1 (3 seconds), and daily recurrence from local midnight with a two-minute interval and one-day duration every day.
  • InteractiveToken, least privilege, IgnoreNew, a two-minute process limit, mutex, cooldown and backoff remain. Unknown networks are never automatically enrolled; authentication and credential protection are unchanged.
  • Uninstall failures preserve config, DPAPI credential, logs, auto state and launcher; deletion follows successful task removal or confirmed absence. This includes the source fix absent from historical v1.4.0 assets.
  • Approved Stop-Whut / Initialize-WhutDataDirectory helpers, targeted advanced-function interfaces and explicit command/parameter validation. Unsupported combinations return 50; public command names, JSON fields and existing exit meanings remain.
  • PSScriptAnalyzer 1.23.0 development/CI gate, plus synthetic task/launcher regressions and safe local WSH/COM validation. No runtime analyzer dependency or Phase 3 WhatIf/Confirm feature.

Download and upgrade

Assets: whut-net.ps1, identical whut-net-v1.5.0.ps1, and SHA256SUMS.txt. Verify the exact filename's complete SHA-256, keep the script in its stable location, then explicitly rerun the new script's install to migrate an existing direct PowerShell/manual VBS task. Existing credentials and trusted networks are retained. If WSH/VBScript is missing or policy-blocked, resolve that with the system administrator; no policy is changed or visible-console fallback installed.

The tracked whut-net-v1.4.0-fixed.ps1 remains a byte-identical source compatibility alias and reports 1.5.0; it is not the old published asset. The v1.4.0 tag and downloads retain their original bytes and behavior.

Evidence and limits

See field validation for dated authentication/reconnect observations and supplied historical hidden-window/unlock acceptance. New offline regressions and safe WSH exit-37/COM XML validation do not constitute real-device sleep-resume or periodic-retry acceptance. No real credentials, campus authentication or real task registration are used in automated checks. Windows Script Host/VBScript is required only for optional automation. WHUT still uses HTTP; DPAPI protects storage only. Android device authentication remains unverified.

Validation commands, analyzer exceptions and the CI matrix are documented in Contributing. Windows guide contains the exact command matrix, trigger definitions and failure recovery procedure.

中文摘要

此版本仅更新 Windows:生成受管隐藏启动器并同步传回退出码,加入解锁、恢复与每日每两分钟重试触发器,保留互斥、冷却、退避、最低权限和可信网络限制;卸载失败保留全部本地状态。增加命令参数校验及固定版本静态分析门禁。下载脚本并核对 SHA-256 后,显式重跑 install 更新任务。Android 仍使用原实验版,旧标签和资产不变。历史现场验收、本次模拟回归与安全本地集成分开记录;未声称新版睡眠恢复或周期重试已完成现场验收。

Delivery verification

Commit: 76393a2; merged PR #7.

66 offline cases pass on both PowerShell 7.2.24 and the current local engine. All 9 scripts parse and pass pinned PSScriptAnalyzer 1.23.0. Analyzer-rejection, WSH child-exit/false-zero and COM validation-only checks pass. Secret/history guard, architecture/50 local links and canonical/compatibility byte equality pass. No campus authentication or actual task registration performed. English/Chinese GFM previews pass at 1280px/390px.

CI: PR Windows matrix, main Windows matrix, main architecture. Historical field evidence is retained; new sleep-resume/periodic event delivery remains unverified on devices.