ch
Feedback
APT

APT

前往频道在 Telegram

This channel discusses: — Offensive Security — RedTeam — Malware Research — OSINT — etc Disclaimer: t.me/APT_Notes/6 Chat Link: t.me/APT_Notes_PublicChat

显示更多
俄罗斯45 631技术与应用8 841

📈 Telegram 频道 APT 的分析概览

频道 APT (@apt_notes) 英语 语言赛道中的 是活跃参与者。目前社区聚集了 14 674 名订阅者，在 技术与应用 类别中位列第 8 841，并在 俄罗斯 地区排名第 45 631 位。

📊 受众指标与增长动态

自 невідомо 创建以来，项目保持高速增长，吸引了 14 674 名订阅者。

根据 12 六月, 2026 的最新数据，频道保持稳定运转。过去 30 天订阅人数变化为 406，过去 24 小时变化为 7，整体触达仍然可观。

  • 认证状态： 未认证
  • 互动率 (ER)： 平均受众互动率为 49.89%。内容发布后 24 小时内通常能获得 N/A% 的反应，占订阅者总量。
  • 帖子覆盖： 每篇帖子平均可获得 7 313 次浏览，首日通常累积 0 次浏览。
  • 互动与反馈： 受众积极参与，单帖平均反应数为 20。

📝 描述与内容策略

作者将该频道定位为表达主观观点的平台：
“This channel discusses: — Offensive Security — RedTeam — Malware Research — OSINT — etc Disclaimer: t.me/APT_Notes/6 Chat Link: t.me/APT_Notes_PublicChat”

凭借高频更新（最新数据采集于 13 六月, 2026），频道始终保持新鲜度与高覆盖。分析显示受众积极互动，使其成为 技术与应用 类别中的关键影响点。

14 674
订阅者
+724 小时
+1007 天
+40630 天
帖子存档
APT
APT
14 675
Early Bird Catches the Wormhole: Observations from the StellarParticle Campaign StellarParticle, an adversary campaign associ
Early Bird Catches the Wormhole: Observations from the StellarParticle Campaign StellarParticle, an adversary campaign associated with COZY BEAR, was active throughout 2021 leveraging novel tactics and techniques in supply chain attacks observed by CrowdStrike incident responders https://www.crowdstrike.com/blog/observations-from-the-stellarparticle-campaign/ #threatintel #dfir #blueteam #malware

APT
APT
14 675
Windows Win32k — Local Privilege Escalation (CVE-2022-21882) https://github.com/KaLendsi/CVE-2022-21882 #windows #lpe #cve

APT
APT
14 675
FunctionStomping This is a brand-new technique for shellcode injection to evade AVs and EDRs. This technique is inspired by M
FunctionStomping This is a brand-new technique for shellcode injection to evade AVs and EDRs. This technique is inspired by Module Stomping and has some similarities.The big advantage of this technique is that it isn't overwritting an entire module or PE, just one function and the target process can still use any other function from the target module. https://github.com/Idov31/FunctionStomping #edr #evasion #stomping #maldev #cpp

APT
APT
14 675
SMBeagle This is fileshare auditing tool that hunts out all files it can see in the network and reports if the file can be re
SMBeagle This is fileshare auditing tool that hunts out all files it can see in the network and reports if the file can be read and/or written. https://github.com/punk-security/SMBeagle #ad #share #enum #tools

APT
APT
14 675
List of Vulnerable Functions for Different Languages This list contains signatures for potentially vulnerable functions for numerous languages in a format suitable for use. https://rules.sonarsource.com/ https://github.com/wireghoul/graudit #appsec #vulnerable #function #source

APT
APT
14 675
Cobalt Strike, a Defender’s Guide In this research, exposes adversarial Tactics, Techniques and Procedures (TTPs) as well as
Cobalt Strike, a Defender’s Guide In this research, exposes adversarial Tactics, Techniques and Procedures (TTPs) as well as the tools use to execute mission objectives. In most of cases, the threat actors utilizing Cobalt Strike. Therefore, defenders should know how to detect Cobalt Strike in various stages of its execution. The primary purpose of this articles is to expose the most common techniques from the intrusions track and provide detections. Having said that, not all of Cobalt Strike’s features will be discussed. # https://thedfirreport.com/2021/08/29/cobalt-strike-a-defenders-guide/ # https://thedfirreport.com/2022/01/24/cobalt-strike-a-defenders-guide-part-2/ #cobaltstrike #research #blueteam

APT
APT
14 675
PwnKit: Local Privilege Escalation Vulnerability in Polkit’s Pkexec (CVE-2021-4034) The Qualys Research Team has discovered a
PwnKit: Local Privilege Escalation Vulnerability in Polkit’s Pkexec (CVE-2021-4034) The Qualys Research Team has discovered a memory corruption vulnerability in polkit’s pkexec, a SUID-root program that is installed by default on every major Linux distribution. This easily exploited vulnerability allows any unprivileged user to gain full root privileges on a vulnerable host by exploiting this vulnerability in its default configuration. Research: https://blog.qualys.com/vulnerabilities-threat-research/2022/01/25/pwnkit-local-privilege-escalation-vulnerability-discovered-in-polkits-pkexec-cve-2021-4034 PoC: https://github.com/arthepsy/CVE-2021-4034 Exploit: https://github.com/berdav/CVE-2021-4034 #linux #lpe #polkit #cve

APT
APT
14 675
Linux Root PrivEsc and Escaping Containers (CVE-2022-0185) Research: https://www.willsroot.io/2022/01/cve-2022-0185.html Exploit: https://github.com/Crusaders-of-Rust/CVE-2022-0185 #linux #kernel #lpe #escape #container #0day

APT
APT
14 675
SonicWall SMA-100 Unauth RCE Bad Blood is an exploit for CVE-2021-20038, a stack-based buffer overflow in the httpd binary of SMA-100 series systems using firmware versions 10.2.1.x. The exploit, as written, will open up a telnet bind shell on port 1270. An attacker that connects to the shell will achieve execution as nobody. Research: https://attackerkb.com/topics/QyXRC1wbvC/cve-2021-20038/rapid7-analysis Exploit: https://github.com/jbaines-r7/badblood #sonicwall #exploit #rce #cve

APT
APT
14 675
RefleXXion RefleXXion is a utility designed to aid in bypassing user-mode hooks utilised by AV/EPP/EDR etc. In order to bypas
RefleXXion RefleXXion is a utility designed to aid in bypassing user-mode hooks utilised by AV/EPP/EDR etc. In order to bypass the user-mode hooks, it first collects the syscall numbers of the NtOpenFile, NtCreateSection, NtOpenSection and NtMapViewOfSection found in the LdrpThunkSignature array. https://github.com/hlldz/RefleXXion #edr #evasion #cpp #redteam

APT
APT
14 675
Create a Hidden Account in Windows A tool for creating hidden accounts using the registry. In addition to adding hidden accou
Create a Hidden Account in Windows A tool for creating hidden accounts using the registry. In addition to adding hidden accounts, the tool also adds functions to check hidden accounts and delete hidden accounts, so that both the red team and the blue team can use this tool. https://github.com/wgpsec/CreateHiddenAccount #ad #windows #hidden #account

APT
APT
14 675
CRLF OneLiner A simple Bash one liner with aim to automate CRLF vulnerability scanning. This is an extremely helpful and practical One liner for Bug Hunters, which helps you find CRLF missconfiguration in every possible method. Simply replace the links in subdomains.txt with the URL you want to target. This will help you scan for CRLF vulnerability without the need of an external tool. What you have to do is to copy-and-paste the commands into your terminal and finger crossed for any possible CRLF. Bash OneLiner: input='CRLF-one-liner/subdomains.txt';while IFS= read -r targets; do cat CRLF-one-liner/crlf_payloads.txt |xargs -I % sh -c "curl -vs --max-time 9 $targets/% 2>&1 |grep -q '< Set-Cookie: ?crlf'&& echo $targets '[+] is vulnerable with payload: '%>>crlf_results.txt||echo '[-] Not vulnerable: '$targets";done<$input crlf_payloads.txt: https://raw.githubusercontent.com/kleiton0x00/CRLF-one-liner/master/crlf_payloads.txt #crlf #bash #oneliner #bugbounty

APT
APT
14 675
Log4j — WAF and Patches Bypass Tricks https://github.com/Puliczek/CVE-2021-44228-PoC-log4j-bypass-words #log4j #waf #bypass #bugbounty

APT
APT
14 675
Anti-Spam Bypass A script that helps you understand why your E-Mail ended up in Spam https://github.com/mgeeky/decode-spam-he
Anti-Spam Bypass A script that helps you understand why your E-Mail ended up in Spam https://github.com/mgeeky/decode-spam-headers #phishing #anispam #bypass

APT
APT
14 675
Custom Previews For Malicious Attachments A phishing technique that allows attackers to create fake previews for their malici
Custom Previews For Malicious Attachments A phishing technique that allows attackers to create fake previews for their malicious attachment with Google Mail. https://mrd0x.com/phishing-google-users-by-spoofing-previews/ #phishing #gmail #attachments

APT
APT
14 675
Finding Sensitive Files for BugBounty — /proc/self/cwd/index.php — /proc/self/cwd/main.py — /etc/motd — /proc/net/udp — /proc/net/arp — /proc/self/environ — /var/run/secrets/kubernetes.io/serviceaccount — /proc/cmdline — /proc/mounts — /etc/motd — /etc/mysql/my.cnf — /proc/sched_debug — /home/ user/.bash_history — /home/user/.ssh/id_rsa #sensitive #files #bugbounty #bugbountytips

APT
APT
14 675
aesKrbKeyGen Script to calculate Active Directory Kerberos keys (AES256 and AES128) for an account, using its plaintext password. Either of the resulting keys can be utilized with Impacket's getTGT.py to obtain a TGT for the account, provided it is configured to support AES encryption. https://github.com/Tw1sm/AesKrbKeyGen #ad #kerbeos #tgt #tools

APT
APT
14 675
Process Ghosting This article describes a new executable image tampering attack similar to, but distinct from, Doppelgänging
Process Ghosting This article describes a new executable image tampering attack similar to, but distinct from, Doppelgänging and Herpaderping. With this technique, an attacker can write a piece of malware to disk in such a way that it’s difficult to scan or delete it — and where it then executes the deleted malware as though it were a regular file on disk. This technique does not involve code injection, process hollowing, or Transactional NTFS (TxF). Research: https://www.elastic.co/blog/process-ghosting-a-new-executable-image-tampering-attack C# Code Snippet: https://github.com/Wra7h/SharpGhosting #edr #evasion #process #ghosting #csharp

APT
APT
14 675
Adding DCSync Permissions from Linux https://www.n00py.io/2022/01/adding-dcsync-permissions-from-linux/ #ad #dcsync #linux

APT
APT
14 675
LDAP Relay Scan A tool to check Domain Controllers for LDAP server protections regarding the relay of NTLM authentication. https://github.com/zyn3rgy/LdapRelayScan #ad #ldap #scan #tools