en
Feedback
APT

APT

Open in Telegram

This channel discusses: — Offensive Security — RedTeam — Malware Research — OSINT — etc Disclaimer: t.me/APT_Notes/6 Chat Link: t.me/APT_Notes_PublicChat

Show more
Russia40 467Technologies & Applications7 792

📈 Analytical overview of Telegram channel APT

Channel APT (@apt_notes) in the English language segment is an active participant. Currently, the community unites 16 228 subscribers, ranking 7 792 in the Technologies & Applications category and 40 467 in the Russia region.

📊 Audience metrics and dynamics

Since its creation on невідомо, the project has demonstrated rapid growth, gathering an audience of 16 228 subscribers.

According to the latest data from 28 August, 2026, the channel demonstrates stable activity. Although there has been a change in the number of participants by 568 over the last 30 days and by 7 over the last 24 hours, overall reach remains high.

  • Verification status: Not verified
  • Engagement rate (ER): The average audience engagement rate is 36.00%. Within the first 24 hours after publication, content typically collects 18.09% reactions from the total number of subscribers.
  • Post reach: On average, each post receives 5 837 views. Within the first day, a publication typically gains 2 934 views.
  • Reactions and interaction: The audience actively supports content: the average number of reactions per post is 28.

📝 Description and content policy

The author describes the resource as a platform for expressing subjective opinions:
“This channel discusses: — Offensive Security — RedTeam — Malware Research — OSINT — etc Disclaimer: t.me/APT_Notes/6 Chat Link: t.me/APT_Notes_PublicChat”

Thanks to the high frequency of updates (latest data received on 29 August, 2026), the channel maintains relevance and a high level of publication reach. Analytics show that the audience actively interacts with content, making it an important point of influence in the Technologies & Applications category.

16 228
Subscribers
+724 hours
+1047 days
+56830 days
Posts Archive
APT
APT
16 228
Repost from Offensive Xwitter
😈 [ codewhisperer84 @codewhisperer84 ] Check out Titanis, my new C#-based protocol library! It features implementations of SMB and various Windows RPC protocols along with Kerberos and NTLM. 🔗 https://github.com/trustedsec/Titanis/ 🐥 [ tweet ]

APT
APT
16 228
🎯 SpearSpray Advanced password spraying tool for Active Directory environments. Combines LDAP user enumeration with intellig
🎯 SpearSpray Advanced password spraying tool for Active Directory environments. Combines LDAP user enumeration with intelligent pattern-based password generation. Uses Kerberos pre-authentication and leverages user-specific data (pwdLastSet, displayName) to create personalized passwords per user. 🔗 Source: https://github.com/sikumy/spearspray #ad #password #spraying #kerberos #bloodhound

APT
APT
16 228
🛡CreateProcessAsPPL This is a utility for running processes with Protected Process Light (PPL) protection, enabling bypass o
🛡CreateProcessAsPPL This is a utility for running processes with Protected Process Light (PPL) protection, enabling bypass of EDR/AV solution defensive mechanisms. It leverages legitimate Windows clipup.exe functionality from System32 to create protected processes that can overwrite antivirus service executable files. 🔗 Source: https://github.com/2x7EQ13/CreateProcessAsPPL #av #edr #bypass #ppl

APT
APT
16 228
Repost from Whitehat Lab
💻 GroupPolicyBackdoor Инструмент пост эксплуатации для различных манипуляций с GPO. Написан на 😰 Python Впервые представлена на DEFCON 33 Примеры: 
#backup
python3 gpb.py restore backup -d 'corp.com' -o './my_backups' --dc ad01-dc.corp.com -u 'john' -p 'Password1!' -n 'TARGET_GPO'

#inject
python3 gpb.py gpo inject --domain 'corp.com' --dc 'ad01-dc.corp.com' -k --module modules_templates/ImmediateTask_create.ini --gpo-name 'TARGET_GPO'
Пример ini: 
[MODULECONFIG]
name = Scheduled Tasks
type = computer

[MODULEOPTIONS]
task_type = immediate
program = cmd.exe
arguments = /c "whoami > C:\Temp\poc.txt"

[MODULEFILTERS]
filters =
    [{
        "operator": "AND",
        "type": "Computer Name",
        "value": "ad01-srv1.corp.com"
    }]
GPO creation, deletion, backup and injections Various injectable configurations, with, for each, customizable options (see list in the wiki) Possibility to remove injected configurations from the target GPO Possibility to revert the actions performed on client devices GPO links manipulation GPO enumeration / user privileges enumeration on GPOs
💻 Repo 📔 Docs #gpo #redteam #windows ✈️ Whitehat Lab 💬Chat

APT
APT
16 228
Repost from 1N73LL1G3NC3
🐶 vCenterHound Collect infrastructure and permissions data from vCenter and export it as a BloodHound‑compatible graph using
🐶 vCenterHound Collect infrastructure and permissions data from vCenter and export it as a BloodHound‑compatible graph using Custom Nodes/Edges

APT
APT
16 228
Repost from PT SWARM
👑 Our researcher has discovered LPE in VMWare Tools (CVE-2025-22230 & CVE-2025-22247) via VGAuth! Write-up by the one who br
👑 Our researcher has discovered LPE in VMWare Tools (CVE-2025-22230 & CVE-2025-22247) via VGAuth! Write-up by the one who broke it: Sergey Bliznyuk https://swarm.ptsecurity.com/the-guest-who-could-exploiting-lpe-in-vmware-tools/

APT
APT
16 228
🖼️ SharePoint RCE — ToolShell (CVE‑2025‑53770) Critical deserialization of untrusted data vulnerability in Microsoft SharePo
🖼️ SharePoint RCE — ToolShell (CVE‑2025‑53770) Critical deserialization of untrusted data vulnerability in Microsoft SharePoint allows unauthenticated remote code execution over the network. The exploit uses POST requests to /_layouts/15/ToolPane.aspx with HTTP Referer header /_layouts/SignOut.aspx to bypass authentication, then extracts MachineKey configuration to generate valid __VIEWSTATE payloads for arbitrary code execution via a single HTTP request. 🔗 Research: https://research.eye.security/sharepoint-under-siege/ 🔗 PoC: https://gist.github.com/gboddin/6374c04f84b58cef050f5f4ecf43d501 #ad #sharepoint #deserialization #toolshell #rce

APT
APT
16 228
🌐 101 Chrome Exploitation Introductory course on browser exploitation — not just covering individual JIT bugs, but a compreh
🌐 101 Chrome Exploitation Introductory course on browser exploitation — not just covering individual JIT bugs, but a comprehensive dive into browser architecture, security layers, and principles of building exploit chains. The author demonstrates how to turn memory corruption into working exploits by analyzing a functional 3-stage chain for Chrome 130. 🔗 Source: https://opzero.ru/en/press/101-chrome-exploitation-part-0-preface/ #chrome #v8 #sandbox #redteam

APT
APT
16 228
🔑 Golden DMSA Critical vulnerability in Windows Server 2025 allows attackers with KDS root key access to generate passwords
🔑 Golden DMSA Critical vulnerability in Windows Server 2025 allows attackers with KDS root key access to generate passwords for all dMSA/gMSA accounts forest-wide. New research reveals design flaw in ManagedPasswordId structure - only 1,024 possible combinations makes brute-force trivial. 🔗 Research: https://www.semperis.com/blog/golden-dmsa-what-is-dmsa-authentication-bypass/ 🔗 Source: https://github.com/Semperis/GoldenDMSA #ad #windows #dmsa #kerberos #persistence

APT
APT
16 228
🔥 MS-RPC-Fuzzer PowerShell-based fuzzer that automates MS-RPC vulnerability research by dynamically creating RPC clients and
🔥 MS-RPC-Fuzzer PowerShell-based fuzzer that automates MS-RPC vulnerability research by dynamically creating RPC clients and fuzzing procedures with random inputs. Visualizes results through Neo4j graphs to help researchers identify potentially vulnerable RPC services. 🔗 Source: https://github.com/warpnet/MS-RPC-Fuzzer #rpc #fuzzing #windows #vulnerability #research

APT
APT
16 228
🐶 LudusHound This is a tool for red and blue teams that transforms BloodHound data into a fully functional, Active Directory
🐶 LudusHound This is a tool for red and blue teams that transforms BloodHound data into a fully functional, Active Directory replica environment via the Ludus framework for controlled testing. This tool can be used to replicate most AD objects and permissions or can be used to replicate a specific Attack Path. 🔗 Research: https://specterops.io/blog/2025/07/14/ludushound-raising-bloodhound-attack-paths-to-life/ 🔗 Source: https://gitlab.com/badsectorlabs/ludus #ad #bloodhound #ludus #replica

APT
APT
16 228
🩸 CitrixBleed 2 — Citrix NetScaler Memory Leak (CVE-2025-5777) Critical memory leak vulnerability in Citrix NetScaler ADC/Gateway. Sending malformed POST request with login parameter without value causes server to return ~127 bytes of uninitialized stack memory, including session tokens, enabling MFA bypass and active session hijacking. 🔗 Research: https://doublepulsar.com/citrixbleed-2-electric-boogaloo-cve-2025-5777-c7f5e349d206 🔗 Source: https://github.com/win3zz/CVE-2025-5777 #citrix #netscaler #memoryleak #exploit

APT
APT
16 228
🔀 LdrShuffle Code execution/injection technique using _LDR_DATA_TABLE_ENTRY structure manipulation in PEB to redirect EntryP
🔀 LdrShuffle Code execution/injection technique using _LDR_DATA_TABLE_ENTRY structure manipulation in PEB to redirect EntryPoint of loaded DLLs. Allows code execution without using classic APIs like CreateRemoteThread or QueueUserAPC. 🔗 Source: https://github.com/RWXstoned/LdrShuffle #windows #peb #dll #injection #evasion

APT
APT
16 228
🔍 NauthNRPC A Python tool that introduces a new method for gathering domain information, including the enumeration of domain
🔍 NauthNRPC A Python tool that introduces a new method for gathering domain information, including the enumeration of domain users. The tool leverages auth-level = 1 (No authentication) against the MS-NRPC (Netlogon) interface on domain controllers. All that's required is the domain controller's IP address, and the entire process can be completed without providing any credentials. 🔗 Research: https://securelist.com/no-auth-domain-information-enumeration/112629/ 🔗 Source: https://github.com/sud0Ru/NauthNRPC #ad #enum #netlogon #rpc

APT
APT
16 228
Repost from Offensive Xwitter
Успейте подать заявку на Pentest Award 2025 до 30 июня! Это отраслевая награда для специалистов по тестированию на проникнове
Успейте подать заявку на Pentest Award 2025 до 30 июня! Это отраслевая награда для специалистов по тестированию на проникновение, которая проводится уже в третий раз. Основная задача премии — выделить лучших специалистов и показать их вклад в развитие российского пентеста. Участие бесплатное, финалисты получат технику apple и максимальный почет сообщества этичных хакеров. Церемония награждения будет проходить 1 августа в Москве. Заявка на премию — это рассказ о лучшем проекте в свободной форме. Не нужно раскрывать эксплоиты, любые шаги в цепочке эксплуатации могут быть полностью анонимны, а детали могут быть скрыты, важно отразить сам подход и идею. Подать заявку и узнать больше информации можно на сайте — https://award.awillix.ru/

APT
APT
16 228
Repost from Ralf Hacker Channel
CVE-2025-33073: Reflective Kerberos Relay (LPE) Blog: https://blog.redteam-pentesting.de/2025/reflective-kerberos-relay-attack/ Patched: June 10, 2025 Интересная LPE с релеем на себя... Даже CVE есть) #lpe #ad #relay #pentest #redteam

APT
APT
16 228

APT
APT
16 228
Repost from Новости Москвы
👨‍🎓Дети участников боевых действий в РФ могут бесплатно учиться в вузах — принят закон

APT
APT
16 228
🔐 Bitrix CMS Ultimate Pentest Guide A detailed guide on penetration testing for 1C-Bitrix CMS, one of the most popular conte
🔐 Bitrix CMS Ultimate Pentest Guide A detailed guide on penetration testing for 1C-Bitrix CMS, one of the most popular content management systems in CIS countries. The guide covers authentication bypasses, XSS, SSRF, LFI, RCE exploits, WAF bypass methods, and vulnerabilities in third-party modules (especially Aspro). 🔗 Source: https://pentestnotes.ru/notes/bitrix_pentest_full/ #1c #bitrix #web

APT
APT
16 228
Repost from Offensive Xwitter
😈 [ Toffy @toffyrak ] I have just released my first tool: GPOHound 🚀 GPOHound is an offensive tool for dumping and analysin
+3
😈 [ Toffy @toffyrak ] I have just released my first tool: GPOHound 🚀 GPOHound is an offensive tool for dumping and analysing GPOs. It leverages BloodHound data and enriches it with insights extracted from the analysis. Check it out here: 🔗 https://github.com/cogiceo/GPOHound 🐥 [ tweet ]