APT
前往频道在 Telegram
This channel discusses: — Offensive Security — RedTeam — Malware Research — OSINT — etc Disclaimer: t.me/APT_Notes/6 Chat Link: t.me/APT_Notes_PublicChat
显示更多📈 Telegram 频道 APT 的分析概览
频道 APT (@apt_notes) 英语 语言赛道中的 是活跃参与者。目前社区聚集了 17 259 名订阅者，在 技术与应用 类别中位列第 7 511，并在 俄罗斯 地区排名第 38 016 位。
📊 受众指标与增长动态
自 невідомо 创建以来，项目保持高速增长，吸引了 17 259 名订阅者。
根据 02 十一月, 2026 的最新数据，频道保持稳定运转。过去 30 天订阅人数变化为 494，过去 24 小时变化为 15，整体触达仍然可观。
- 认证状态： 未认证
- 互动率 (ER)： 平均受众互动率为 44.17%。内容发布后 24 小时内通常能获得 N/A% 的反应，占订阅者总量。
- 帖子覆盖： 每篇帖子平均可获得 0 次浏览，首日通常累积 0 次浏览。
- 互动与反馈： 受众积极参与，单帖平均反应数为 0。
📝 描述与内容策略
作者将该频道定位为表达主观观点的平台：
“This channel discusses:
— Offensive Security
— RedTeam
— Malware Research
— OSINT
— etc
Disclaimer:
t.me/APT_Notes/6
Chat Link:
t.me/APT_Notes_PublicChat”
凭借高频更新（最新数据采集于 03 十一月, 2026），频道始终保持新鲜度与高覆盖。分析显示受众积极互动，使其成为 技术与应用 类别中的关键影响点。
17 259
订阅者
+1524 小时
+1077 天
+49430 天
帖子存档
17 259
#BurpHacksForBounties - Tip 14/30
Burp Suite Config provides options for handling configurations for User-level and project-level options.
I personally use this configuration :
#appsec #infosec #burp #bugbountytips #bugbountytip
17 259
#BurpHacksForBounties - Day 13/30
How to use Burp in most efficient way and bag a bounty.
In Bug bounty methodology by Uncle Rat (@theXSSrat) :
https://thexssrat.medium.com/bug-bounty-methodology-v3-0-hunt-like-a-rat-9e030fc54363
#infosec #appsec #bugbounty #bugbountytips
17 259
Injector
Complete Arsenal of Memory injection and other techniques for red-teaming in Windows
https://github.com/0xDivyanshu/Injector
#proces #inject #memory #windows
17 259
- Add Burp CA to device
- Bypass cert pinning
- Root the device(required for iptable)
Dport 80 routing - run these commands
iptables -t nat -A OUTPUT -p tcp --dport 80 -j DNAT --to-destination <BURP_IP>:8080
iptables -t nat -A POSTROUTING -p tcp --dport 80 -j MASQUERADE17 259
#BurpHacksForBounties - Day 12/30
IPtables + Burp Suite + Android Applications. 😍🤓🤫😀
Tricky and length but worth setting up.
#burp #bugbountytips #infosec #security #appsec #bugbountytip
17 259
Why I do this: I save sessions, and burp will store those credentials and sessions. I personally don't want credentials to be stored in files.
Another important point is we are not testing SSO, rather we are testing App behind SSO.
17 259
Steps :
1. Temporary project/session.
2. Login to the application, like normal.
3. Identify which requests to which domains contain credentials.
4. Start the main project in Burp.
5. Add those Domains to SSL passthrough. Proxy > Options > TLS Pass-Through
17 259
#BurpHacksForBounties - Hack 11/30
We mostly use PortSwigger 's Burp Suite pro for corporate pentesting, & we should not capture and store corporate credentials.
Steps that I use and why is it important: 👇
#infosec #appsec #burp #Burpsuite
17 259
🔥 Credential Dumping 🔥
Clipboard: https://www.hackingarticles.in/credential-dumping-clipboard/
Local Security Authority: https://www.hackingarticles.in/credential-dumping-local-security-authority-lsalsass-exe/
NTDS.dit https://www.hackingarticles.in/credential-dumping-ntds-dit/
DCSync Attack: https://www.hackingarticles.in/credential-dumping-dcsync-attack/
Windows Autologon Password: https://www.hackingarticles.in/credential-dumping-windows-autologon-password/
Domain Cache Credential: https://www.hackingarticles.in/credential-dumping-domain-cache-credential/
Fake Services: https://www.hackingarticles.in/credential-dumping-fake-services/
Phishing Windows Credentials: https://www.hackingarticles.in/credential-dumping-phishing-windows-credentials/
#infosec #redteaming #cybersecurity #pentest
17 259
CVE-2021-22555: Turning \x00\x00 into 10000$
This is a 15 years old heap out-of-bounds write vulnerability in Linux Netfilter that is powerful enough to bypass all modern security mitigations and achieve kernel code execution
# Technical details — https://github.com/google/security-research/blob/master/pocs/linux/cve-2021-22555/writeup.md
# PoC — https://github.com/google/security-research/tree/master/pocs/linux/cve-2021-22555
#CVE #BoF #Vulns
17 259
Kerlab
Kerberos laboratory to better understand and then detecting attack on kerberos
https://github.com/citronneur/kerlab
#kerberos #pentest #lab
17 259
SpoolSploit
A collection of Windows print spooler exploits containerized with other utilities for practical exploitation.
https://github.com/BeetleChunks/SpoolSploit
#PrintNightmare #pentest #exploit
17 259
Sometimes I see 304 in response in Burp and I have to dig in the Burp history to check the first occurrence of the response and analyze. With those headers removed, you may not find such responses.
17 259
Enable the following rules in Proxy -> Options -> Match and Replace.
- If-Modified-Since
- If-None-Match
These are inbuilt rules in Burp Suite
17 259
#BurpHacksForBounties - Day 10/30
Do you face issues with Cached responses too with Burp Suite?
Then this is what you should do. Just disable it 😂😂
#infosec #security #appsec #bugbountytips #bugbounty
17 259
Huntkit - Docker Image For Pentesting, Bug Bounty, CTF and Red Teaming
https://github.com/mcnamee/huntkit
#Metasploit #masscan #Exploitation #BugBounty #RedTeaming #CTF
