en
Feedback

Don't get caught by a cheater! Telemetrio finds and tags such channels 👉 If you want to see the tag, subscribe

APT

APT

Open in Telegram

This channel discusses: — Offensive Security — RedTeam — Malware Research — OSINT — etc Disclaimer: t.me/APT_Notes/6 Chat Link: t.me/APT_Notes_PublicChat

Show more
Russia38 285Technologies & Applications7 576

📈 Analytical overview of Telegram channel APT

Channel APT (@apt_notes) in the English language segment is an active participant. Currently, the community unites 17 196 subscribers, ranking 7 576 in the Technologies & Applications category and 38 285 in the Russia region.

📊 Audience metrics and dynamics

Since its creation on невідомо, the project has demonstrated rapid growth, gathering an audience of 17 196 subscribers.

According to the latest data from 28 October, 2026, the channel demonstrates stable activity. Although there has been a change in the number of participants by 468 over the last 30 days and by 9 over the last 24 hours, overall reach remains high.

  • Verification status: Not verified
  • Engagement rate (ER): The average audience engagement rate is 44.37%. Within the first 24 hours after publication, content typically collects N/A% reactions from the total number of subscribers.
  • Post reach: On average, each post receives 0 views. Within the first day, a publication typically gains 0 views.
  • Reactions and interaction: The audience actively supports content: the average number of reactions per post is 0.

📝 Description and content policy

The author describes the resource as a platform for expressing subjective opinions:
“This channel discusses: — Offensive Security — RedTeam — Malware Research — OSINT — etc Disclaimer: t.me/APT_Notes/6 Chat Link: t.me/APT_Notes_PublicChat”

Thanks to the high frequency of updates (latest data received on 29 October, 2026), the channel maintains relevance and a high level of publication reach. Analytics show that the audience actively interacts with content, making it an important point of influence in the Technologies & Applications category.

17 196
Subscribers
+924 hours
+1377 days
+46830 days
Posts Archive
APT
APT
17 196
Repost from Pentest Notes
Подготовил для вас подробное руководство по тестированию на проникновение Outlook Web Access (OWA). 😈 ➡️ В статье я разобрал
Подготовил для вас подробное руководство по тестированию на проникновение Outlook Web Access (OWA). 😈 ➡️ В статье я разобрал все основные атаки и уязвимости OWA. Собрал и структурировал самое полезное в одном месте. ➡️ Также материал идеально подойдет для тех, кто все еще путает между собой OWA, Outlook и MS Exchange :) Даже если вы раньше не сталкивались с почтовыми сервисами Microsoft, после прочтения смело можете бежать проверять их на безопасность. 🥤 Ссылка на статью 💫 @pentestnotes | #pentest #OWA #Exchange

APT
APT
17 196
Repost from Offensive Xwitter
😈 [ codewhisperer84 @codewhisperer84 ] Check out Titanis, my new C#-based protocol library! It features implementations of SMB and various Windows RPC protocols along with Kerberos and NTLM. 🔗 https://github.com/trustedsec/Titanis/ 🐥 [ tweet ]

APT
APT
17 196
🎯 SpearSpray Advanced password spraying tool for Active Directory environments. Combines LDAP user enumeration with intellig
🎯 SpearSpray Advanced password spraying tool for Active Directory environments. Combines LDAP user enumeration with intelligent pattern-based password generation. Uses Kerberos pre-authentication and leverages user-specific data (pwdLastSet, displayName) to create personalized passwords per user. 🔗 Source: https://github.com/sikumy/spearspray #ad #password #spraying #kerberos #bloodhound

APT
APT
17 196
🛡CreateProcessAsPPL This is a utility for running processes with Protected Process Light (PPL) protection, enabling bypass o
🛡CreateProcessAsPPL This is a utility for running processes with Protected Process Light (PPL) protection, enabling bypass of EDR/AV solution defensive mechanisms. It leverages legitimate Windows clipup.exe functionality from System32 to create protected processes that can overwrite antivirus service executable files. 🔗 Source: https://github.com/2x7EQ13/CreateProcessAsPPL #av #edr #bypass #ppl

APT
APT
17 196
Repost from Whitehat Lab
💻 GroupPolicyBackdoor Инструмент пост эксплуатации для различных манипуляций с GPO. Написан на 😰 Python Впервые представлена на DEFCON 33 Примеры: 
#backup
python3 gpb.py restore backup -d 'corp.com' -o './my_backups' --dc ad01-dc.corp.com -u 'john' -p 'Password1!' -n 'TARGET_GPO'

#inject
python3 gpb.py gpo inject --domain 'corp.com' --dc 'ad01-dc.corp.com' -k --module modules_templates/ImmediateTask_create.ini --gpo-name 'TARGET_GPO'
Пример ini: 
[MODULECONFIG]
name = Scheduled Tasks
type = computer

[MODULEOPTIONS]
task_type = immediate
program = cmd.exe
arguments = /c "whoami > C:\Temp\poc.txt"

[MODULEFILTERS]
filters =
    [{
        "operator": "AND",
        "type": "Computer Name",
        "value": "ad01-srv1.corp.com"
    }]
GPO creation, deletion, backup and injections Various injectable configurations, with, for each, customizable options (see list in the wiki) Possibility to remove injected configurations from the target GPO Possibility to revert the actions performed on client devices GPO links manipulation GPO enumeration / user privileges enumeration on GPOs
💻 Repo 📔 Docs #gpo #redteam #windows ✈️ Whitehat Lab 💬Chat

APT
APT
17 196
Repost from 1N73LL1G3NC3
🐶 vCenterHound Collect infrastructure and permissions data from vCenter and export it as a BloodHound‑compatible graph using
🐶 vCenterHound Collect infrastructure and permissions data from vCenter and export it as a BloodHound‑compatible graph using Custom Nodes/Edges

APT
APT
17 196
Repost from PT SWARM
👑 Our researcher has discovered LPE in VMWare Tools (CVE-2025-22230 & CVE-2025-22247) via VGAuth! Write-up by the one who br
👑 Our researcher has discovered LPE in VMWare Tools (CVE-2025-22230 & CVE-2025-22247) via VGAuth! Write-up by the one who broke it: Sergey Bliznyuk https://swarm.ptsecurity.com/the-guest-who-could-exploiting-lpe-in-vmware-tools/

APT
APT
17 196
🖼️ SharePoint RCE — ToolShell (CVE‑2025‑53770) Critical deserialization of untrusted data vulnerability in Microsoft SharePo
🖼️ SharePoint RCE — ToolShell (CVE‑2025‑53770) Critical deserialization of untrusted data vulnerability in Microsoft SharePoint allows unauthenticated remote code execution over the network. The exploit uses POST requests to /_layouts/15/ToolPane.aspx with HTTP Referer header /_layouts/SignOut.aspx to bypass authentication, then extracts MachineKey configuration to generate valid __VIEWSTATE payloads for arbitrary code execution via a single HTTP request. 🔗 Research: https://research.eye.security/sharepoint-under-siege/ 🔗 PoC: https://gist.github.com/gboddin/6374c04f84b58cef050f5f4ecf43d501 #ad #sharepoint #deserialization #toolshell #rce

APT
APT
17 196
🌐 101 Chrome Exploitation Introductory course on browser exploitation — not just covering individual JIT bugs, but a compreh
🌐 101 Chrome Exploitation Introductory course on browser exploitation — not just covering individual JIT bugs, but a comprehensive dive into browser architecture, security layers, and principles of building exploit chains. The author demonstrates how to turn memory corruption into working exploits by analyzing a functional 3-stage chain for Chrome 130. 🔗 Source: https://opzero.ru/en/press/101-chrome-exploitation-part-0-preface/ #chrome #v8 #sandbox #redteam

APT
APT
17 196
🔑 Golden DMSA Critical vulnerability in Windows Server 2025 allows attackers with KDS root key access to generate passwords
🔑 Golden DMSA Critical vulnerability in Windows Server 2025 allows attackers with KDS root key access to generate passwords for all dMSA/gMSA accounts forest-wide. New research reveals design flaw in ManagedPasswordId structure - only 1,024 possible combinations makes brute-force trivial. 🔗 Research: https://www.semperis.com/blog/golden-dmsa-what-is-dmsa-authentication-bypass/ 🔗 Source: https://github.com/Semperis/GoldenDMSA #ad #windows #dmsa #kerberos #persistence

APT
APT
17 196
🔥 MS-RPC-Fuzzer PowerShell-based fuzzer that automates MS-RPC vulnerability research by dynamically creating RPC clients and
🔥 MS-RPC-Fuzzer PowerShell-based fuzzer that automates MS-RPC vulnerability research by dynamically creating RPC clients and fuzzing procedures with random inputs. Visualizes results through Neo4j graphs to help researchers identify potentially vulnerable RPC services. 🔗 Source: https://github.com/warpnet/MS-RPC-Fuzzer #rpc #fuzzing #windows #vulnerability #research

APT
APT
17 196
🐶 LudusHound This is a tool for red and blue teams that transforms BloodHound data into a fully functional, Active Directory
🐶 LudusHound This is a tool for red and blue teams that transforms BloodHound data into a fully functional, Active Directory replica environment via the Ludus framework for controlled testing. This tool can be used to replicate most AD objects and permissions or can be used to replicate a specific Attack Path. 🔗 Research: https://specterops.io/blog/2025/07/14/ludushound-raising-bloodhound-attack-paths-to-life/ 🔗 Source: https://gitlab.com/badsectorlabs/ludus #ad #bloodhound #ludus #replica

APT
APT
17 196
🩸 CitrixBleed 2 — Citrix NetScaler Memory Leak (CVE-2025-5777) Critical memory leak vulnerability in Citrix NetScaler ADC/Gateway. Sending malformed POST request with login parameter without value causes server to return ~127 bytes of uninitialized stack memory, including session tokens, enabling MFA bypass and active session hijacking. 🔗 Research: https://doublepulsar.com/citrixbleed-2-electric-boogaloo-cve-2025-5777-c7f5e349d206 🔗 Source: https://github.com/win3zz/CVE-2025-5777 #citrix #netscaler #memoryleak #exploit

APT
APT
17 196
🔀 LdrShuffle Code execution/injection technique using _LDR_DATA_TABLE_ENTRY structure manipulation in PEB to redirect EntryP
🔀 LdrShuffle Code execution/injection technique using _LDR_DATA_TABLE_ENTRY structure manipulation in PEB to redirect EntryPoint of loaded DLLs. Allows code execution without using classic APIs like CreateRemoteThread or QueueUserAPC. 🔗 Source: https://github.com/RWXstoned/LdrShuffle #windows #peb #dll #injection #evasion

APT
APT
17 196
🔍 NauthNRPC A Python tool that introduces a new method for gathering domain information, including the enumeration of domain
🔍 NauthNRPC A Python tool that introduces a new method for gathering domain information, including the enumeration of domain users. The tool leverages auth-level = 1 (No authentication) against the MS-NRPC (Netlogon) interface on domain controllers. All that's required is the domain controller's IP address, and the entire process can be completed without providing any credentials. 🔗 Research: https://securelist.com/no-auth-domain-information-enumeration/112629/ 🔗 Source: https://github.com/sud0Ru/NauthNRPC #ad #enum #netlogon #rpc

APT
APT
17 196
Repost from Offensive Xwitter
Успейте подать заявку на Pentest Award 2025 до 30 июня! Это отраслевая награда для специалистов по тестированию на проникнове
Успейте подать заявку на Pentest Award 2025 до 30 июня! Это отраслевая награда для специалистов по тестированию на проникновение, которая проводится уже в третий раз. Основная задача премии — выделить лучших специалистов и показать их вклад в развитие российского пентеста. Участие бесплатное, финалисты получат технику apple и максимальный почет сообщества этичных хакеров. Церемония награждения будет проходить 1 августа в Москве. Заявка на премию — это рассказ о лучшем проекте в свободной форме. Не нужно раскрывать эксплоиты, любые шаги в цепочке эксплуатации могут быть полностью анонимны, а детали могут быть скрыты, важно отразить сам подход и идею. Подать заявку и узнать больше информации можно на сайте — https://award.awillix.ru/

APT
APT
17 196
Repost from Ralf Hacker Channel
CVE-2025-33073: Reflective Kerberos Relay (LPE) Blog: https://blog.redteam-pentesting.de/2025/reflective-kerberos-relay-attack/ Patched: June 10, 2025 Интересная LPE с релеем на себя... Даже CVE есть) #lpe #ad #relay #pentest #redteam

APT
APT
17 196

APT
APT
17 196
Repost from Новости Москвы
👨‍🎓Дети участников боевых действий в РФ могут бесплатно учиться в вузах — принят закон

APT
APT
17 196
🔐 Bitrix CMS Ultimate Pentest Guide A detailed guide on penetration testing for 1C-Bitrix CMS, one of the most popular conte
🔐 Bitrix CMS Ultimate Pentest Guide A detailed guide on penetration testing for 1C-Bitrix CMS, one of the most popular content management systems in CIS countries. The guide covers authentication bypasses, XSS, SSRF, LFI, RCE exploits, WAF bypass methods, and vulnerabilities in third-party modules (especially Aspro). 🔗 Source: https://pentestnotes.ru/notes/bitrix_pentest_full/ #1c #bitrix #web