不要被骗子欺骗！Telemetrio 会找到并标记这些频道 👉 如果想查看标记，请订阅

APT

前往频道在 Telegram

This channel discusses: — Offensive Security — RedTeam — Malware Research — OSINT — etc Disclaimer: t.me/APT_Notes/6 Chat Link: t.me/APT_Notes_PublicChat

显示更多

俄罗斯38 016技术与应用7 511...

📈 Telegram 频道 APT 的分析概览

频道 APT (@apt_notes) 英语语言赛道中的是活跃参与者。目前社区聚集了 17 259 名订阅者，在 技术与应用 类别中位列第 7 511，并在 俄罗斯 地区排名第 38 016 位。

📊 受众指标与增长动态

自 невідомо 创建以来，项目保持高速增长，吸引了 17 259 名订阅者。

根据 02 十一月, 2026 的最新数据，频道保持稳定运转。过去 30 天订阅人数变化为 494，过去 24 小时变化为 15，整体触达仍然可观。

认证状态： 未认证
互动率 (ER)： 平均受众互动率为 44.17%。内容发布后 24 小时内通常能获得 N/A% 的反应，占订阅者总量。
帖子覆盖： 每篇帖子平均可获得 0 次浏览，首日通常累积 0 次浏览。
互动与反馈： 受众积极参与，单帖平均反应数为 0。

📝 描述与内容策略

作者将该频道定位为表达主观观点的平台：
“This channel discusses: — Offensive Security — RedTeam — Malware Research — OSINT — etc Disclaimer: t.me/APT_Notes/6 Chat Link: t.me/APT_Notes_PublicChat”

凭借高频更新（最新数据采集于 03 十一月, 2026），频道始终保持新鲜度与高覆盖。分析显示受众积极互动，使其成为 技术与应用 类别中的关键影响点。

17 259

订阅者

+1524 小时

+1077 天

+49430 天

7 622

帖子浏览量

无数据24 小时

无数据48 小时

44.17%

参与率

无数据

每日帖子数

Ads index

帖子存档

test\nAnd put KKK in all fields. All fields will be replaced with this payload.\n\nIt will find trivial XSS and SQLi.","datePublished":"2021-07-05T01:01:06Z","dateModified":"2021-07-05T01:01:06Z","author":{"@type":"Organization","name":"APT","url":"https://telemetr.io/ch/channels/1390210355-apt_notes","image":"https://img.telemetr.io/c/1w5bdF/5386640763535865221?ty=x"},"publisher":{"@type":"Organization","name":"APT","url":"https://telemetr.io/ch/channels/1390210355-apt_notes","image":"https://img.telemetr.io/c/1w5bdF/5386640763535865221?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":92},{"@type":"InteractionCounter","interactionType":"https://schema.org/ShareAction","userInteractionCount":1}]}},{"@type":"ListItem","position":13,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/ch/channels/1390210355-apt_notes/posts/115","url":"https://telemetr.io/ch/channels/1390210355-apt_notes/posts/115","mainEntityOfPage":"https://telemetr.io/ch/channels/1390210355-apt_notes/posts/115","headline":"2/n This is an example trick to change the false returned body to true. And this is a very common use case. T…","articleBody":"2/n\nThis is an example trick to change the false returned body to true.\nAnd this is a very common use case. \n\nThe major trick for today: Injecting payloads into forms instead of typing out the entire payload.","datePublished":"2021-07-05T01:01:06Z","dateModified":"2021-07-05T01:01:06Z","author":{"@type":"Organization","name":"APT","url":"https://telemetr.io/ch/channels/1390210355-apt_notes","image":"https://img.telemetr.io/c/1w5bdF/5386640763535865221?ty=x"},"publisher":{"@type":"Organization","name":"APT","url":"https://telemetr.io/ch/channels/1390210355-apt_notes","image":"https://img.telemetr.io/c/1w5bdF/5386640763535865221?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":83}]}},{"@type":"ListItem","position":14,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/ch/channels/1390210355-apt_notes/posts/114","url":"https://telemetr.io/ch/channels/1390210355-apt_notes/posts/114","mainEntityOfPage":"https://telemetr.io/ch/channels/1390210355-apt_notes/posts/114","headline":"1/n False2True trick, when access to a resource for the user is unauthorized. By changing server response bod…","articleBody":"1/n False2True trick, when access to a resource for the user is unauthorized.\nBy changing server response body from F to T in burp response body match and replace, there are great chances it can un-hide client-side controls.\n\n1. Add Match and replace.\n2. Add shown replacement.","datePublished":"2021-07-05T01:01:06Z","dateModified":"2021-07-05T01:01:06Z","author":{"@type":"Organization","name":"APT","url":"https://telemetr.io/ch/channels/1390210355-apt_notes","image":"https://img.telemetr.io/c/1w5bdF/5386640763535865221?ty=x"},"publisher":{"@type":"Organization","name":"APT","url":"https://telemetr.io/ch/channels/1390210355-apt_notes","image":"https://img.telemetr.io/c/1w5bdF/5386640763535865221?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":87}]}},{"@type":"ListItem","position":15,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/ch/channels/1390210355-apt_notes/posts/113","url":"https://telemetr.io/ch/channels/1390210355-apt_notes/posts/113","mainEntityOfPage":"https://telemetr.io/ch/channels/1390210355-apt_notes/posts/113","headline":"#BurpHacksForBounties - Day 2/30 Effective usage of Match and Replace feature of Burp Suite False2True Trick…","articleBody":"#BurpHacksForBounties - Day 2/30\n\nEffective usage of Match and Replace feature of Burp Suite \n\nFalse2True Trick & Injecting all fields with polyglot payloads 😉😉\n\nHow to thread 🧵👇\n\n#infosec #security #appsec #burp #bugbounty #bugbountytips","datePublished":"2021-07-05T01:00:08Z","dateModified":"2021-07-05T01:00:08Z","author":{"@type":"Organization","name":"APT","url":"https://telemetr.io/ch/channels/1390210355-apt_notes","image":"https://img.telemetr.io/c/1w5bdF/5386640763535865221?ty=x"},"publisher":{"@type":"Organization","name":"APT","url":"https://telemetr.io/ch/channels/1390210355-apt_notes","image":"https://img.telemetr.io/c/1w5bdF/5386640763535865221?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":84}]}},{"@type":"ListItem","position":16,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/ch/channels/1390210355-apt_notes/posts/112","url":"https://telemetr.io/ch/channels/1390210355-apt_notes/posts/112","mainEntityOfPage":"https://telemetr.io/ch/channels/1390210355-apt_notes/posts/112","headline":"Snaffler Snaffler - Gets a list of Windows computers from Active Directory, then spreads out its snaffly appe…","articleBody":"Snaffler \n\nSnaffler - Gets a list of Windows computers from Active Directory, then spreads out its snaffly appendages to them all to figure out which ones have file shares, and whether you can read them\n\nhttps://github.com/SnaffCon/Snaffler\n\n\n#pentest","datePublished":"2021-07-04T16:37:27Z","dateModified":"2021-07-04T16:37:27Z","author":{"@type":"Organization","name":"APT","url":"https://telemetr.io/ch/channels/1390210355-apt_notes","image":"https://img.telemetr.io/c/1w5bdF/5386640763535865221?ty=x"},"publisher":{"@type":"Organization","name":"APT","url":"https://telemetr.io/ch/channels/1390210355-apt_notes","image":"https://img.telemetr.io/c/1w5bdF/5386640763535865221?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":85}]}},{"@type":"ListItem","position":17,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/ch/channels/1390210355-apt_notes/posts/111","url":"https://telemetr.io/ch/channels/1390210355-apt_notes/posts/111","mainEntityOfPage":"https://telemetr.io/ch/channels/1390210355-apt_notes/posts/111","headline":"n/n You can do almost anything with Python inside Burp. Eg. - Handle custom login - Tailored testing - Filter…","articleBody":"n/n\nYou can do almost anything with Python inside Burp.\nEg.\n- Handle custom login\n- Tailored testing\n- Filter out requests on \"interesting\" responses\n- Scale your testing\n- Add rate limiting, pipeline, etc\n\nThis approach can overcome intruder multithreading deficiencies in CE.","datePublished":"2021-07-04T01:01:06Z","dateModified":"2021-07-04T01:01:06Z","author":{"@type":"Organization","name":"APT","url":"https://telemetr.io/ch/channels/1390210355-apt_notes","image":"https://img.telemetr.io/c/1w5bdF/5386640763535865221?ty=x"},"publisher":{"@type":"Organization","name":"APT","url":"https://telemetr.io/ch/channels/1390210355-apt_notes","image":"https://img.telemetr.io/c/1w5bdF/5386640763535865221?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":93},{"@type":"InteractionCounter","interactionType":"https://schema.org/ShareAction","userInteractionCount":1}]}},{"@type":"ListItem","position":18,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/ch/channels/1390210355-apt_notes/posts/110","url":"https://telemetr.io/ch/channels/1390210355-apt_notes/posts/110","mainEntityOfPage":"https://telemetr.io/ch/channels/1390210355-apt_notes/posts/110","headline":"3/n Details in comments. Code: https://gist.github.com/r0hi7/47e3d47efaa1ee3df63a6e936dade787 Increase concur…","articleBody":"3/n\nDetails in comments.\nCode: https://gist.github.com/r0hi7/47e3d47efaa1ee3df63a6e936dade787\n\nIncrease concurrency or can add pipeline. \nThen click attack.","datePublished":"2021-07-04T01:01:06Z","dateModified":"2021-07-04T01:01:06Z","author":{"@type":"Organization","name":"APT","url":"https://telemetr.io/ch/channels/1390210355-apt_notes","image":"https://img.telemetr.io/c/1w5bdF/5386640763535865221?ty=x"},"publisher":{"@type":"Organization","name":"APT","url":"https://telemetr.io/ch/channels/1390210355-apt_notes","image":"https://img.telemetr.io/c/1w5bdF/5386640763535865221?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":96},{"@type":"InteractionCounter","interactionType":"https://schema.org/ShareAction","userInteractionCount":1}]}},{"@type":"ListItem","position":19,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/ch/channels/1390210355-apt_notes/posts/109","url":"https://telemetr.io/ch/channels/1390210355-apt_notes/posts/109","mainEntityOfPage":"https://telemetr.io/ch/channels/1390210355-apt_notes/posts/109","headline":"2/n Once you send req to the plugin, a python editor will open. This will show a couple of existing python sc…","articleBody":"2/n\nOnce you send req to the plugin, a python editor will open. This will show a couple of existing python scripts to take reference from and to use.","datePublished":"2021-07-04T01:01:06Z","dateModified":"2021-07-04T01:01:06Z","author":{"@type":"Organization","name":"APT","url":"https://telemetr.io/ch/channels/1390210355-apt_notes","image":"https://img.telemetr.io/c/1w5bdF/5386640763535865221?ty=x"},"publisher":{"@type":"Organization","name":"APT","url":"https://telemetr.io/ch/channels/1390210355-apt_notes","image":"https://img.telemetr.io/c/1w5bdF/5386640763535865221?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":95},{"@type":"InteractionCounter","interactionType":"https://schema.org/ShareAction","userInteractionCount":1}]}},{"@type":"ListItem","position":20,"item":{"@type":"SocialMediaPosting","@id":"https://telemetr.io/ch/channels/1390210355-apt_notes/posts/108","url":"https://telemetr.io/ch/channels/1390210355-apt_notes/posts/108","mainEntityOfPage":"https://telemetr.io/ch/channels/1390210355-apt_notes/posts/108","headline":"1/n Using: CE so that everyone can explore. Intruder in CE is limited in multithreading, Turbo-Intruder can o…","articleBody":"1/n \nUsing: CE so that everyone can explore.\nIntruder in CE is limited in multithreading, Turbo-Intruder can overcome that.\n- Install through Extender\n- Send req to the plugin.","datePublished":"2021-07-04T01:01:06Z","dateModified":"2021-07-04T01:01:06Z","author":{"@type":"Organization","name":"APT","url":"https://telemetr.io/ch/channels/1390210355-apt_notes","image":"https://img.telemetr.io/c/1w5bdF/5386640763535865221?ty=x"},"publisher":{"@type":"Organization","name":"APT","url":"https://telemetr.io/ch/channels/1390210355-apt_notes","image":"https://img.telemetr.io/c/1w5bdF/5386640763535865221?ty=x"},"commentCount":0,"interactionStatistic":[{"@type":"InteractionCounter","interactionType":"https://schema.org/ViewAction","userInteractionCount":93},{"@type":"InteractionCounter","interactionType":"https://schema.org/ShareAction","userInteractionCount":1}]}}]}
APT
17 267
owerHub - post exploitation tool based on a web application https://reconshell.com/powerhub-post-exploitation-tool-based-on-a-web-application/ #PowerHub #PowerSploit #PowerView #Kerberos #LPE #PowerShell
APT
17 267
charlotte – fully undetected shellcode launcher #shellcode #msfvenom #XOR #ShellcodeLauncher #CobaltStrike #Payload https://reconshell.com/charlotte-fully-undetected-shellcode-launcher/
APT
17 267
red shadow - Lightspin AWS Vulnerability Scanner https://reconshell.com/red-shadow-lightspin-aws-vulnerability-scanner/ #PrivilegeEscalation #exploit #Exploitation #AWS #Vulnerability #Scanner
APT
17 267
Link to stokfredrik blog on Burp Suite: https://portswigger.net/blog/burp-suite-tips-from-power-user-and-hackfluencer-stok A must-read for beginners.
APT
17 267
+1
2/n Before & After.
APT
17 267
1/n Unzipping setting is disabled by default in Burp Proxy, enable it like this.
APT
17 267
🍺🤡 #BurpHacksForBounties - Day 4/30 Don't ignore junk-looking information in Burp Suite. Keep this setting on, and play with zipped data in Burp Suite. 🤫🤫 You can change zipped data in req Learned from @stokfredrik #infosec #appsec #security #burp #bugbountytips #bugbountytip
APT
17 267
3/n Can be used to discover the request sent by script from the browser and learn it to craft your valid payload request to that endpoint. More references: https://portswigger.net/burp/documentation/desktop/functions/search
APT
17 267
+1
2/n A new window will open up which will show the references and location of those references as well. Location can be a repeater, scanner, etc. The reference can be in Request, Response, Headers. Will be highlighted like the one shown in the image.
APT
17 267
1/n Pick request from anywhere, right click -> Engagement Tools -> Find References
APT
17 267
♥️ #BurpHacksForBounties - Day 3/30 ♥️ 🔍🔎 Find References: The most underrated and underused feature of Burp Suite Pro Only & Can find references for URIs across the entire Burp. A short thread : 🧵👇 #infosec #appsec #security #burp #bugbountytip #bugbountytips
APT
17 267
3/n The above match and replace rule will replace all KKK in the request body to SQLi and XSS polyglot. Say I use this : `'"><script src="somesrc"></script><h1>test` And put KKK in all fields. All fields will be replaced with this payload. It will find trivial XSS and SQLi.
APT
17 267
2/n This is an example trick to change the false returned body to true. And this is a very common use case. The major trick for today: Injecting payloads into forms instead of typing out the entire payload.
APT
17 267
+2
1/n False2True trick, when access to a resource for the user is unauthorized. By changing server response body from F to T in burp response body match and replace, there are great chances it can un-hide client-side controls. 1. Add Match and replace. 2. Add shown replacement.
APT
17 267
#BurpHacksForBounties - Day 2/30 Effective usage of Match and Replace feature of Burp Suite False2True Trick & Injecting all fields with polyglot payloads 😉😉 How to thread 🧵👇 #infosec #security #appsec #burp #bugbounty #bugbountytips
APT
17 267
Snaffler Snaffler - Gets a list of Windows computers from Active Directory, then spreads out its snaffly appendages to them all to figure out which ones have file shares, and whether you can read them https://github.com/SnaffCon/Snaffler #pentest
APT
17 267
n/n You can do almost anything with Python inside Burp. Eg. - Handle custom login - Tailored testing - Filter out requests on "interesting" responses - Scale your testing - Add rate limiting, pipeline, etc This approach can overcome intruder multithreading deficiencies in CE.
APT
17 267
3/n Details in comments. Code: https://gist.github.com/r0hi7/47e3d47efaa1ee3df63a6e936dade787 Increase concurrency or can add pipeline. Then click attack.
APT
17 267
2/n Once you send req to the plugin, a python editor will open. This will show a couple of existing python scripts to take reference from and to use.
APT
17 267
1/n Using: CE so that everyone can explore. Intruder in CE is limited in multithreading, Turbo-Intruder can overcome that. - Install through Extender - Send req to the plugin.