APT
الذهاب إلى القناة على Telegram
This channel discusses: — Offensive Security — RedTeam — Malware Research — OSINT — etc Disclaimer: t.me/APT_Notes/6 Chat Link: t.me/APT_Notes_PublicChat
إظهار المزيد📈 نظرة تحليلية على قناة تيليجرام APT
تُعد قناة APT (@apt_notes) في القطاع اللغوي الإنكليزية لاعباً نشطاً. يضم المجتمع حالياً 17 259 مشتركاً، محتلاً المرتبة 7 511 في فئة التكنولوجيات والتطبيقات والمرتبة 38 016 في منطقة روسيا.
📊 مؤشرات الجمهور والحراك
منذ تأسيسه في невідомо، حقق المشروع نمواً سريعاً وجمع 17 259 مشتركاً.
بحسب آخر البيانات بتاريخ 02 نوفمبر, 2026، تحافظ القناة على نشاط مستقر. خلال آخر 30 يوماً تغيّر عدد الأعضاء بمقدار 494، وفي آخر 24 ساعة بمقدار 15، مع بقاء الوصول العام مرتفعاً.
- حالة التحقق: غير موثّقة
- معدل التفاعل (ER): يبلغ متوسط تفاعل الجمهور 44.17%. وخلال أول 24 ساعة من النشر يحصد المحتوى عادةً N/A% من ردود الفعل نسبةً إلى إجمالي المشتركين.
- وصول المنشورات: يحصل كل منشور على متوسط 0 مشاهدة. وخلال اليوم الأول يجمع عادةً 0 مشاهدة.
- التفاعلات والاستجابة: يتفاعل الجمهور بانتظام؛ متوسط التفاعلات لكل منشور يبلغ 0.
📝 الوصف وسياسة المحتوى
يصف المؤلف القناة بأنها مساحة للتعبير عن الآراء الذاتية:
“This channel discusses:
— Offensive Security
— RedTeam
— Malware Research
— OSINT
— etc
Disclaimer:
t.me/APT_Notes/6
Chat Link:
t.me/APT_Notes_PublicChat”
بفضل وتيرة التحديث المرتفعة (أحدث البيانات بتاريخ 03 نوفمبر, 2026) تحافظ القناة على حداثتها ومستوى وصول مرتفع. وتُظهر التحليلات تفاعلاً نشطاً من الجمهور، ما يجعلها نقطة تأثير مهمة ضمن فئة التكنولوجيات والتطبيقات.
17 259
المشتركون
+1524 ساعات
+1077 أيام
+49430 أيام
أرشيف المشاركات
17 265
Labs for Web application Pentesting Practice
SQLi: https://github.com/Audi-1/sqli-labs
Oauth 2.0: https://github.com/koenbuyens/Vulnerable-OAuth-2.0-Applications
GraphQL: https://github.com/david3107/graphql-security-labs
JWT Authentication: https://github.com/Sjord/jwtdemo
SAML Authentication: https://github.com/yogisec/VulnerableSAMLApp
XSS: https://portswigger.net/web-security/cross-site-scripting
#bugbounty
17 265
Zero-day / CVE-2021-35211
SolarWinds 2.0: Serv-U Remote Memory Escape Vulnerability. The said vulnerability was reported to SolarWinds by Microsoft security team and is under active exploitation.
This security vulnerability only affects Serv-U Managed File Transfer and Serv-U Secure FTP and does not affect any other SolarWinds or N-able (formerly SolarWinds MSP) products.
https://www.solarwinds.com/trust-center/security-advisories/cve-2021-35211
17 265
Proxying Edge for Burp Suite without interfering with your system proxy settings.
#bugbountytips
17 265
+1When you are playing with a parameter in the repeater tab and its value gets reflected in the response, you can enable this toggle when you have to scroll to see what has changed...a true time-saver!
How to? See the image below.
17 265
+1Create Macros for burp as discussed in previous tweet.
#BurpHacksForBounties - Day 7
Once created, add it as session and set the scope. For demo, I am adding all URLs as Scope.
Now all the requests mentioned in Tools scope will be Macro processed.
Use Tracer to debug macro
17 265
#BurpHacksForBounties - Day 8/30
Burp Suite Automation through Macros and Using macros in creating sessions for APIs and protected resources.
#infosec #appsec #burp #security #bugbountytips #bugbounty
17 265
n/n
Use cases
- Sites having custom login.
- Useful in writing extender plugins.
- IDOR testing.
Tomorrow we will see how we can automate testing with Macro and burp.
17 265
+23/n
Use Macro with sessions.
For all in-scope URLs now, this macro under sessions will run prior to each request.
17 265
+12/n
Click Add and proxy tab will open.
Send the requests you want to record.
Click OK.
Macro will be recorded give it a fancy name.
17 265
1/n
Macros in Burp suite are set of recorded requests.
You create that recorded requests by passing request/(s) through proxy first and then selecting set of requests to add to a Macro.
To create a Macro: Project Options -> Sessions -> Macro
17 265
#BurpHacksForBounties - Day 7/30
Macro: A recorded session in Burp Suite
Part 1: What, How & Why?
Part 2: How to use to automate testing?
#infosec #ppsec #bugbounty #bugbountytips #security #burp
17 265
Got a S3 bucket but don't know who is the owner?
Use the below command to check the bucket owner
aws s3api get-bucket-acl --bucket bucket-name
#bugbountytip #bugbountytips #infosec #AWS17 265
+12/n
The best approach is to disable this on Firefox, once and for all.
Trust me this is easy and this wil be your great investment.
Go to about:config and disable this completely.
17 265
+11/n
I personally use firefox, and if you have used it as I do, you must have seen a lot of detectportal.firefox.com requests.
They are noisy, you can right-click on that and mark "Do not intercept", but that is not a persistent way either.
in CE you don't have sessions. :(
17 265
0/n
First of all, why?
Why use Firefox if Burp Suite has Chromium browser built-in?
This is because :
- Burp inbuilt chromium does not persist settings on each different run.
- Plugin reinstallation each time
- Can't disable local CORS checks
- It's not flexible etc.
17 265
🚨🚨 #BurpHacksForBounties - Day 6/30
Burp Suite and firefox 🔥🦊 match made in heaven.
Read the shortcomings of in-built browser and how to make firefox silent.
Down here 👇🍺
#infosec #appsec #burp #security #bugbounty #bugbountytips
17 265
VMware Exploitation
A collection of links related to VMware escape exploit
https://github.com/xairy/vmware-exploitation
#vmware
17 265
#BurpHacksForBounties - Day 5/30
Check intruder, repeater, sequencer, etc response in one shot instead of every time sending the response to browser.
A short but important trick
