-
Orange Tsai
https://blog.orange.tw/ -
Assetnote Research Notes
https://www.assetnote.io/resources/research
| # Warcraft III on FreeBSD / wine-proton-11 -- all fixes, one file | |
| # Base: ValveSoftware/wine experimental-11.0-20260910 (c1928082ac141b7f03982eacce980a4fe4840d0b) | |
| # Apply with: patch -p0 < this-file (from the Wine source root / WRKSRC) | |
| # | |
| # 1) dlls/kernelbase/process.c : BlizzardBrowser.exe --no-sandbox (+ porters' x86_64 #if widening) | |
| # 2) dlls/crypt32/chain.c : accept 88-byte CERT_CHAIN_ENGINE_CONFIG | |
| # 3) include/wincrypt.h : add Windows 8 dwExclusiveFlags field | |
| --- dlls/kernelbase/process.c.orig 2026-09-10 00:00:00.000000000 -0700 | |
| +++ dlls/kernelbase/process.c 2026-09-16 09:30:00.000000000 -0700 |
| # The spelled-out intro to language modeling: building makemore | |
| **Source:** https://www.youtube.com/watch?v=PaCmpygFfXo&list=PLAqhIrjkxbuWI23v9cThsA9GvCAUhRvKZ&index=2 | |
| **Site:** www.youtube.com | |
| **Exported:** 7/15/2026, 7:18:17 PM | |
| --- | |
| ## Q1: Write this in place operation for P down as note. |
| #define WIN32_LEAN_AND_MEAN | |
| #include <winsock2.h> | |
| #include <windows.h> | |
| #define SECURITY_WIN32 | |
| #include <security.h> | |
| #define SCHANNEL_USE_BLACKLISTS | |
| #include <subauth.h> | |
| #include <schnlsp.h> | |
| #include <shlwapi.h> | |
| #include <assert.h> |
https://www.youtube.com/watch?v=Ts-ofIVRMo4
https://notes.netbytesec.com/2023/06/install-elastic-kibana.html
https://www.elastic.co/guide/en/kibana/current/deb.html
All commands are from the video, and the two documents above.
It's suggested to watch the video first, then follow along with the following commands.
-
Operation CuckooBees: Cybereason Uncovers Massive Chinese Intellectual Property Theft Operation
https://www.cybereason.com/blog/operation-cuckoobees-cybereason-uncovers-massive-chinese-intellectual-property-theft-operation -
Blowing Cobalt Strike Out of the Water With Memory Analysis https://unit42.paloaltonetworks.com/cobalt-strike-memory-analysis/#post-125875-_e2rkiblq96ad
Credit to Flare VM for the script.
This gist is to pick a former version of the install script and have it installed successfully on a Windows 10 x64 1809 VM machine becuase the latest one doesn't work.
Note: FLARE VM should ONLY be installed on a virtual machine!
- Prepare a Windows 10+ virtual machine
- FLARE VM has been tested on
Windows 10 1809 x64and20H2
- AAD
- Active Directory
- Cloud
- Cobalt Strike / Aggressor Scripts
- Recon
- Privilege Escalation
- UAC
- Metasploit
- Infrastructure
- SMB