APT
前往频道在 Telegram
This channel discusses: — Offensive Security — RedTeam — Malware Research — OSINT — etc Disclaimer: t.me/APT_Notes/6 Chat Link: t.me/APT_Notes_PublicChat
显示更多📈 Telegram 频道 APT 的分析概览
频道 APT (@apt_notes) 英语 语言赛道中的 是活跃参与者。目前社区聚集了 14 712 名订阅者,在 技术与应用 类别中位列第 8 844,并在 俄罗斯 地区排名第 45 464 位。
📊 受众指标与增长动态
自 невідомо 创建以来,项目保持高速增长,吸引了 14 712 名订阅者。
根据 14 六月, 2026 的最新数据,频道保持稳定运转。过去 30 天订阅人数变化为 432,过去 24 小时变化为 26,整体触达仍然可观。
- 认证状态: 未认证
- 互动率 (ER): 平均受众互动率为 51.64%。内容发布后 24 小时内通常能获得 N/A% 的反应,占订阅者总量。
- 帖子覆盖: 每篇帖子平均可获得 7 592 次浏览,首日通常累积 0 次浏览。
- 互动与反馈: 受众积极参与,单帖平均反应数为 20。
📝 描述与内容策略
作者将该频道定位为表达主观观点的平台:
“This channel discusses:
— Offensive Security
— RedTeam
— Malware Research
— OSINT
— etc
Disclaimer:
t.me/APT_Notes/6
Chat Link:
t.me/APT_Notes_PublicChat”
凭借高频更新(最新数据采集于 15 六月, 2026),频道始终保持新鲜度与高覆盖。分析显示受众积极互动,使其成为 技术与应用 类别中的关键影响点。
14 712
订阅者
+2624 小时
+1137 天
+43230 天
帖子存档
14 715
Reconflow
This is all in one tool for gathering reconnaissance information about a target without the hassle of installing multiple tools and their dependencies & also presents you the results to your telegram chat.
https://github.com/adarshshetty18/reconflow
#recon #bugbounty #telegram
14 715
Nim on the Attack
Process Injection Using Nim and the Windows API
https://huskyhacks.dev/2021/07/17/nim-exploit-dev/
#redteam #winapi #injection #nim
14 715
WiFiDemon
iOS WiFi RCE 0-Day Vulnerability & a 'Zero-Click' Vulnerability That was Silently Patched
https://blog.zecops.com/research/meet-wifidemon-ios-wifi-rce-0-day-vulnerability-and-a-zero-click-vulnerability-that-was-silently-patched/
#0day #ios #rce
14 715
#BurpHacksForBounties - Day 15/30
Macros in Burp Suite by akshita_infosec. I could not have explained it better than she did. Nice work :)
https://akshita-infosec.medium.com/burp-macros-what-why-how-151df8901641
#infosec #appsec #bugbounties #bugbountytips #burp
14 715
Remote Code Execution in cdnjs of CloudFlare
https://blog.ryotak.me/post/cdnjs-remote-code-execution-en/
#RCE #cdnjs #cloudflare
14 715
Port Forwarding & Tunnelling Cheatsheet
https://www.hackingarticles.in/port-forwarding-tunnelling-cheatsheet/
#infosec #ctf #oscp #pentest #cybersecurity
14 715
#BurpHacksForBounties - Tip 14/30
Burp Suite Config provides options for handling configurations for User-level and project-level options.
I personally use this configuration :
#appsec #infosec #burp #bugbountytips #bugbountytip
14 715
#BurpHacksForBounties - Day 13/30
How to use Burp in most efficient way and bag a bounty.
In Bug bounty methodology by Uncle Rat (@theXSSrat) :
https://thexssrat.medium.com/bug-bounty-methodology-v3-0-hunt-like-a-rat-9e030fc54363
#infosec #appsec #bugbounty #bugbountytips
14 715
Injector
Complete Arsenal of Memory injection and other techniques for red-teaming in Windows
https://github.com/0xDivyanshu/Injector
#proces #inject #memory #windows
14 715
- Add Burp CA to device
- Bypass cert pinning
- Root the device(required for iptable)
Dport 80 routing - run these commands
iptables -t nat -A OUTPUT -p tcp --dport 80 -j DNAT --to-destination <BURP_IP>:8080
iptables -t nat -A POSTROUTING -p tcp --dport 80 -j MASQUERADE14 715
#BurpHacksForBounties - Day 12/30
IPtables + Burp Suite + Android Applications. 😍🤓🤫😀
Tricky and length but worth setting up.
#burp #bugbountytips #infosec #security #appsec #bugbountytip
14 715
Why I do this: I save sessions, and burp will store those credentials and sessions. I personally don't want credentials to be stored in files.
Another important point is we are not testing SSO, rather we are testing App behind SSO.
14 715
Steps :
1. Temporary project/session.
2. Login to the application, like normal.
3. Identify which requests to which domains contain credentials.
4. Start the main project in Burp.
5. Add those Domains to SSL passthrough. Proxy > Options > TLS Pass-Through
14 715
#BurpHacksForBounties - Hack 11/30
We mostly use PortSwigger 's Burp Suite pro for corporate pentesting, & we should not capture and store corporate credentials.
Steps that I use and why is it important: 👇
#infosec #appsec #burp #Burpsuite
14 715
🔥 Credential Dumping 🔥
Clipboard: https://www.hackingarticles.in/credential-dumping-clipboard/
Local Security Authority: https://www.hackingarticles.in/credential-dumping-local-security-authority-lsalsass-exe/
NTDS.dit https://www.hackingarticles.in/credential-dumping-ntds-dit/
DCSync Attack: https://www.hackingarticles.in/credential-dumping-dcsync-attack/
Windows Autologon Password: https://www.hackingarticles.in/credential-dumping-windows-autologon-password/
Domain Cache Credential: https://www.hackingarticles.in/credential-dumping-domain-cache-credential/
Fake Services: https://www.hackingarticles.in/credential-dumping-fake-services/
Phishing Windows Credentials: https://www.hackingarticles.in/credential-dumping-phishing-windows-credentials/
#infosec #redteaming #cybersecurity #pentest
14 715
CVE-2021-22555: Turning \x00\x00 into 10000$
This is a 15 years old heap out-of-bounds write vulnerability in Linux Netfilter that is powerful enough to bypass all modern security mitigations and achieve kernel code execution
# Technical details — https://github.com/google/security-research/blob/master/pocs/linux/cve-2021-22555/writeup.md
# PoC — https://github.com/google/security-research/tree/master/pocs/linux/cve-2021-22555
#CVE #BoF #Vulns
现已上线!2025 年 Telegram 研究 — 年度关键洞察 
