VPN PlaybookLog in to Cisco VPN without touching the authenticator.

Scripts that compute your TOTP code and drive the Cisco Secure Client CLI for you, plus a Dockerized OpenConnect that hands you a SOCKS5 proxy. Written against HKU's vpn2fa.hku.hk, works with any similar gateway.

How it works

macOS / Linux

Windows

OpenConnect + Docker

One command to connect

ciscovpn connect on macOS / Linux, a desktop shortcut on Windows. Username, password and the 6-digit code are typed in for you.

No authenticator app in the loop

A TOTP code is just HMAC-SHA1 of a fixed Base32 secret and the time. Extract the secret once, compute the code locally with oathtool or totp-go.

Credentials stay off disk

On Unix the login goes through a pipe straight into the CLI. On Windows the scripted input file is deleted right after use.

Split tunnel via OpenConnect

The stock client takes over all traffic. The Docker setup exposes socks5://127.0.0.1:1080 instead, so only what you point at it goes through the VPN.