APT
前往频道在 Telegram
This channel discusses: — Offensive Security — RedTeam — Malware Research — OSINT — etc Disclaimer: t.me/APT_Notes/6 Chat Link: t.me/APT_Notes_PublicChat
显示更多📈 Telegram 频道 APT 的分析概览
频道 APT (@apt_notes) 英语 语言赛道中的 是活跃参与者。目前社区聚集了 17 259 名订阅者，在 技术与应用 类别中位列第 7 511，并在 俄罗斯 地区排名第 38 016 位。
📊 受众指标与增长动态
自 невідомо 创建以来，项目保持高速增长，吸引了 17 259 名订阅者。
根据 02 十一月, 2026 的最新数据，频道保持稳定运转。过去 30 天订阅人数变化为 494，过去 24 小时变化为 15，整体触达仍然可观。
- 认证状态： 未认证
- 互动率 (ER)： 平均受众互动率为 44.17%。内容发布后 24 小时内通常能获得 N/A% 的反应，占订阅者总量。
- 帖子覆盖： 每篇帖子平均可获得 0 次浏览，首日通常累积 0 次浏览。
- 互动与反馈： 受众积极参与，单帖平均反应数为 0。
📝 描述与内容策略
作者将该频道定位为表达主观观点的平台：
“This channel discusses:
— Offensive Security
— RedTeam
— Malware Research
— OSINT
— etc
Disclaimer:
t.me/APT_Notes/6
Chat Link:
t.me/APT_Notes_PublicChat”
凭借高频更新（最新数据采集于 03 十一月, 2026），频道始终保持新鲜度与高覆盖。分析显示受众积极互动，使其成为 技术与应用 类别中的关键影响点。
17 259
订阅者
+1524 小时
+1077 天
+49430 天
帖子存档
17 265
Labs for Web application Pentesting Practice
SQLi: https://github.com/Audi-1/sqli-labs
Oauth 2.0: https://github.com/koenbuyens/Vulnerable-OAuth-2.0-Applications
GraphQL: https://github.com/david3107/graphql-security-labs
JWT Authentication: https://github.com/Sjord/jwtdemo
SAML Authentication: https://github.com/yogisec/VulnerableSAMLApp
XSS: https://portswigger.net/web-security/cross-site-scripting
#bugbounty
17 265
Zero-day / CVE-2021-35211
SolarWinds 2.0: Serv-U Remote Memory Escape Vulnerability. The said vulnerability was reported to SolarWinds by Microsoft security team and is under active exploitation.
This security vulnerability only affects Serv-U Managed File Transfer and Serv-U Secure FTP and does not affect any other SolarWinds or N-able (formerly SolarWinds MSP) products.
https://www.solarwinds.com/trust-center/security-advisories/cve-2021-35211
17 265
Proxying Edge for Burp Suite without interfering with your system proxy settings.
#bugbountytips
17 265
+1When you are playing with a parameter in the repeater tab and its value gets reflected in the response, you can enable this toggle when you have to scroll to see what has changed...a true time-saver!
How to? See the image below.
17 265
+1Create Macros for burp as discussed in previous tweet.
#BurpHacksForBounties - Day 7
Once created, add it as session and set the scope. For demo, I am adding all URLs as Scope.
Now all the requests mentioned in Tools scope will be Macro processed.
Use Tracer to debug macro
17 265
#BurpHacksForBounties - Day 8/30
Burp Suite Automation through Macros and Using macros in creating sessions for APIs and protected resources.
#infosec #appsec #burp #security #bugbountytips #bugbounty
17 265
n/n
Use cases
- Sites having custom login.
- Useful in writing extender plugins.
- IDOR testing.
Tomorrow we will see how we can automate testing with Macro and burp.
17 265
+23/n
Use Macro with sessions.
For all in-scope URLs now, this macro under sessions will run prior to each request.
17 265
+12/n
Click Add and proxy tab will open.
Send the requests you want to record.
Click OK.
Macro will be recorded give it a fancy name.
17 265
1/n
Macros in Burp suite are set of recorded requests.
You create that recorded requests by passing request/(s) through proxy first and then selecting set of requests to add to a Macro.
To create a Macro: Project Options -> Sessions -> Macro
17 265
#BurpHacksForBounties - Day 7/30
Macro: A recorded session in Burp Suite
Part 1: What, How & Why?
Part 2: How to use to automate testing?
#infosec #ppsec #bugbounty #bugbountytips #security #burp
17 265
Got a S3 bucket but don't know who is the owner?
Use the below command to check the bucket owner
aws s3api get-bucket-acl --bucket bucket-name
#bugbountytip #bugbountytips #infosec #AWS17 265
+12/n
The best approach is to disable this on Firefox, once and for all.
Trust me this is easy and this wil be your great investment.
Go to about:config and disable this completely.
17 265
+11/n
I personally use firefox, and if you have used it as I do, you must have seen a lot of detectportal.firefox.com requests.
They are noisy, you can right-click on that and mark "Do not intercept", but that is not a persistent way either.
in CE you don't have sessions. :(
17 265
0/n
First of all, why?
Why use Firefox if Burp Suite has Chromium browser built-in?
This is because :
- Burp inbuilt chromium does not persist settings on each different run.
- Plugin reinstallation each time
- Can't disable local CORS checks
- It's not flexible etc.
17 265
🚨🚨 #BurpHacksForBounties - Day 6/30
Burp Suite and firefox 🔥🦊 match made in heaven.
Read the shortcomings of in-built browser and how to make firefox silent.
Down here 👇🍺
#infosec #appsec #burp #security #bugbounty #bugbountytips
17 265
VMware Exploitation
A collection of links related to VMware escape exploit
https://github.com/xairy/vmware-exploitation
#vmware
17 265
#BurpHacksForBounties - Day 5/30
Check intruder, repeater, sequencer, etc response in one shot instead of every time sending the response to browser.
A short but important trick
