APT
前往频道在 Telegram
This channel discusses: — Offensive Security — RedTeam — Malware Research — OSINT — etc Disclaimer: t.me/APT_Notes/6 Chat Link: t.me/APT_Notes_PublicChat
显示更多📈 Telegram 频道 APT 的分析概览
频道 APT (@apt_notes) 英语 语言赛道中的 是活跃参与者。目前社区聚集了 14 712 名订阅者,在 技术与应用 类别中位列第 8 844,并在 俄罗斯 地区排名第 45 464 位。
📊 受众指标与增长动态
自 невідомо 创建以来,项目保持高速增长,吸引了 14 712 名订阅者。
根据 14 六月, 2026 的最新数据,频道保持稳定运转。过去 30 天订阅人数变化为 432,过去 24 小时变化为 26,整体触达仍然可观。
- 认证状态: 未认证
- 互动率 (ER): 平均受众互动率为 51.64%。内容发布后 24 小时内通常能获得 N/A% 的反应,占订阅者总量。
- 帖子覆盖: 每篇帖子平均可获得 7 592 次浏览,首日通常累积 0 次浏览。
- 互动与反馈: 受众积极参与,单帖平均反应数为 20。
📝 描述与内容策略
作者将该频道定位为表达主观观点的平台:
“This channel discusses:
— Offensive Security
— RedTeam
— Malware Research
— OSINT
— etc
Disclaimer:
t.me/APT_Notes/6
Chat Link:
t.me/APT_Notes_PublicChat”
凭借高频更新(最新数据采集于 15 六月, 2026),频道始终保持新鲜度与高覆盖。分析显示受众积极互动,使其成为 技术与应用 类别中的关键影响点。
14 712
订阅者
+2624 小时
+1137 天
+43230 天
帖子存档
14 726
3/n
The above match and replace rule will replace all KKK in the request body to SQLi and XSS polyglot.
Say I use this :
'"><script src="somesrc"></script><h1>test
And put KKK in all fields. All fields will be replaced with this payload.
It will find trivial XSS and SQLi.14 726
2/n
This is an example trick to change the false returned body to true.
And this is a very common use case.
The major trick for today: Injecting payloads into forms instead of typing out the entire payload.
14 726
1/n False2True trick, when access to a resource for the user is unauthorized.
By changing server response body from F to T in burp response body match and replace, there are great chances it can un-hide client-side controls.
1. Add Match and replace.
2. Add shown replacement.
14 726
#BurpHacksForBounties - Day 2/30
Effective usage of Match and Replace feature of Burp Suite
False2True Trick & Injecting all fields with polyglot payloads 😉😉
How to thread 🧵👇
#infosec #security #appsec #burp #bugbounty #bugbountytips
14 726
Snaffler
Snaffler - Gets a list of Windows computers from Active Directory, then spreads out its snaffly appendages to them all to figure out which ones have file shares, and whether you can read them
https://github.com/SnaffCon/Snaffler
#pentest
14 726
n/n
You can do almost anything with Python inside Burp.
Eg.
- Handle custom login
- Tailored testing
- Filter out requests on "interesting" responses
- Scale your testing
- Add rate limiting, pipeline, etc
This approach can overcome intruder multithreading deficiencies in CE.
14 726
3/n
Details in comments.
Code: https://gist.github.com/r0hi7/47e3d47efaa1ee3df63a6e936dade787
Increase concurrency or can add pipeline.
Then click attack.
14 726
2/n
Once you send req to the plugin, a python editor will open. This will show a couple of existing python scripts to take reference from and to use.
14 726
1/n
Using: CE so that everyone can explore.
Intruder in CE is limited in multithreading, Turbo-Intruder can overcome that.
- Install through Extender
- Send req to the plugin.
14 726
#BurpHacksForBounties - Day 1/30
Turbo intruder: Power of Python with Burp Suite Intruder.
I use it to tailor my pen-testing for a specific target and targetted #bugbounty
#infosec #appsec #bugbountytips #bugbountytip #security
How to - 🧵🙃👇
14 726
🚨🚨
I am starting the #BurpHacksForBounties series for 30 days, each day will share a Burp hack, which makes my working with Burp Suite easier.
Starting Monday. Stay tuned.
They will not be the ones you find on the internet 😉😉
#infosec #appsec #bugbounties #bugbountytips
14 726
Privilege escalation with polkit
How to get root on Linux with a seven-year-old bug
https://github.blog/2021-06-10-privilege-escalation-polkit-root-on-linux-with-bug/
#pentest
14 726
Microsoft warns of critical PowerShell 7 code execution vulnerability
https://www.bleepingcomputer.com/news/security/microsoft-warns-of-critical-powershell-7-code-execution-vulnerability/
#vulnerability
14 726
🔥🔥🔥
Leveraging PrintNightmare to Abuse RBCD and DCSync the Domain
https://snovvcrash.github.io/2021/06/30/leveraging-printnightmare-to-abuse-rbcd.html
#pentest
14 726
PrintNightmare (CVE-2021-1675): Remote code execution in Windows Spooler Service
https://github.com/hhlxf/PrintNightmare
#pentest
现已上线!2025 年 Telegram 研究 — 年度关键洞察 
