en
Feedback

Don't get caught by a cheater! Telemetrio finds and tags such channels šŸ‘‰ If you want to see the tag, subscribe

APT

APT

Open in Telegram

This channel discusses: — Offensive Security — RedTeam — Malware Research — OSINT — etc Disclaimer: t.me/APT_Notes/6 Chat Link: t.me/APT_Notes_PublicChat

Show more

šŸ“ˆ Analytical overview of Telegram channel APT

Channel APT (@apt_notes) in the English language segment is an active participant. Currently, the community unites 17 238 subscribers, ranking 7 536 in the Technologies & Applications category and 38 103 in the Russia region.

šŸ“Š Audience metrics and dynamics

Since its creation on невіГомо, the project has demonstrated rapid growth, gathering an audience of 17 238 subscribers.

According to the latest data from 31 October, 2026, the channel demonstrates stable activity. Although there has been a change in the number of participants by 487 over the last 30 days and by 13 over the last 24 hours, overall reach remains high.

  • Verification status: Not verified
  • Engagement rate (ER): The average audience engagement rate is 44.23%. Within the first 24 hours after publication, content typically collects N/A% reactions from the total number of subscribers.
  • Post reach: On average, each post receives 0 views. Within the first day, a publication typically gains 0 views.
  • Reactions and interaction: The audience actively supports content: the average number of reactions per post is 0.

šŸ“ Description and content policy

The author describes the resource as a platform for expressing subjective opinions:
ā€œThis channel discusses: — Offensive Security — RedTeam — Malware Research — OSINT — etc Disclaimer: t.me/APT_Notes/6 Chat Link: t.me/APT_Notes_PublicChatā€

Thanks to the high frequency of updates (latest data received on 01 November, 2026), the channel maintains relevance and a high level of publication reach. Analytics show that the audience actively interacts with content, making it an important point of influence in the Technologies & Applications category.

17 238
Subscribers
+1324 hours
+1207 days
+48730 days
Posts Archive
APT
17 238
Bypass 2FA Using noVNC Steal credentials and bypass 2FA by giving users remote access to your server via an HTML5 VNC client
Bypass 2FA Using noVNC Steal credentials and bypass 2FA by giving users remote access to your server via an HTML5 VNC client that has a browser running in kiosk mode. https://mrd0x.com/bypass-2fa-using-novnc/ #2fa #bypass #novnc

APT
17 238
DNS Abuse & Misconfiguration The History of DNS Vulnerabilities and the Cloud https://unit42.paloaltonetworks.com/dns-vulnerabilities/ Dangling Domains: Security Threats, Detection and Prevalence https://unit42.paloaltonetworks.com/dangling-domains/ Fishing the AWS IP Pool for Dangling Domains https://bishopfox.com/blog/fishing-the-aws-ip-pool-for-dangling-domains Respect My Authority – Hijacking Broken Nameservers to Compromise Your Target https://thehackerblog.com/respect-my-authority-hijacking-broken-nameservers-to-compromise-your-target/ The Orphaned Internet – Taking Over 120K Domains via a DNS Vulnerability in AWS, Google Cloud, Rackspace and Digital Ocean https://thehackerblog.com/the-orphaned-internet-taking-over-120k-domains-via-a-dns-vulnerability-in-aws-google-cloud-rackspace-and-digital-ocean/ The .io Error – Taking Control of All .io Domains With a Targeted Registration https://thehackerblog.com/the-io-error-taking-control-of-all-io-domains-with-a-targeted-registration/ The International Incident – Gaining Control of a .int Domain Name With DNS Trickery https://thehackerblog.com/the-international-incident-gaining-control-of-a-int-domain-name-with-dns-trickery/ Hostile Subdomain Takeover using Heroku/Github/Desk + more https://labs.detectify.com/2014/10/21/hostile-subdomain-takeover-using-herokugithubdesk-more/ Dangling DNS: Amazon EC2 IPs https://blog.melbadry9.xyz/dangling-dns/aws/ddns-ec2-current-state Eliminating Dangling Elastic IP Takeovers with Ghostbuster https://blog.assetnote.io/2022/02/13/dangling-eips/ Internet-Wide Analysis of Subdomain Takeovers https://redhuntlabs.com/blog/project-resonance-wave-1.html Subdomain Takeover https://0xpatrik.com/subdomain-takeover-basics/ https://0xpatrik.com/subdomain-takeover-candidates/ https://0xpatrik.com/takeover-proofs/ https://0xpatrik.com/subdomain-takeover-ns/ https://0xpatrik.com/subdomain-takeover/ #dns #abuse #aws #elastic #subdomain #takeover

APT
17 238
Certipy 2.0: BloodHound, New Escalations, Shadow Credentials, Golden Certificates, and more! Blog: https://research.ifcr.dk/certipy-2-0-bloodhound-new-escalations-shadow-credentials-golden-certificates-and-more-34d1c26f0dc6 Tool: https://github.com/ly4k/Certipy #ad #adcs #abuse #tools

APT
17 238
LOLBIN — wlrmdr Action on click: wlrmdr.exe -s 60000 -f 1 -t "Important" -m "Click this dude!" -a 10 -u cmd You can use "-a 1
+1
LOLBIN — wlrmdr Action on click: wlrmdr.exe -s 60000 -f 1 -t "Important" -m "Click this dude!" -a 10 -u cmd You can use "-a 11" to skip the click requirement and spawn your process immediately: wlrmdr -s 0 -f 0 -t 0 -m 0 -a 11 -u cmd #windows #wlrmdr #lolbin #lolbas

APT
17 238
DumpSMBShare A script to dump files and folders remotely from a Windows SMB share. https://github.com/p0dalirius/DumpSMBShare
DumpSMBShare A script to dump files and folders remotely from a Windows SMB share. https://github.com/p0dalirius/DumpSMBShare #ad #smb #share #dump

APT
17 238
Keeping Up with the NTLM Relay https://www.fortalicesolutions.com/posts/keeping-up-with-the-ntlm-relay #ad #ntlm #relay #adcs

APT
17 238
o365recon Script to retrieve information via O365 and AzureAD with a valid cred. https://github.com/nyxgeek/o365recon #azure
o365recon Script to retrieve information via O365 and AzureAD with a valid cred. https://github.com/nyxgeek/o365recon #azure #recon #tools

APT
17 238
Zabbix SAML Authentication Bypass (CVE-2022-23131) https://blog.sonarsource.com/zabbix-case-study-of-unsafe-session-storage #zabbix #research #auth #bypass #cve

APT
17 238
S3Scanner Scan for open S3 buckets and dump the contents Features: — Multi-threaded scanning — Supports tons of S3-compatible
S3Scanner Scan for open S3 buckets and dump the contents Features: — Multi-threaded scanning — Supports tons of S3-compatible APIs — Scans all bucket permissions to find misconfigurations — Dump bucket contents to a local folder — Docker support https://github.com/sa7mon/S3Scanner #aws #s3 #bucket #scanner

APT
17 238
Recon — Horizontal Enumeration https://aaryanapex.medium.com/bug-bounty-methodology-horizontal-enumeration-89f7cd172e6e #osint #recon #enumeration

APT
17 238
Useful Libraries for Malware Development https://captmeelo.com/redteam/maldev/2022/02/16/libraries-for-maldev.html #edr #evasion #lib #maldev #cpp

APT
17 238
CredMaster Launch a password spray / brute force attach via Amazon AWS passthrough proxies, shifting the requesting IP addres
CredMaster Launch a password spray / brute force attach via Amazon AWS passthrough proxies, shifting the requesting IP address for every authentication attempt. This dynamically creates FireProx APIs for more evasive password sprays. The following plugins are currently supported: — OWA — EWS — O365 — O365Enum — MSOL — Okta — FortinetVPN — HTTPBrute — ADFS — AzureSSO https://github.com/knavesec/CredMaster #owa #o365 #adfs #password #spraying

APT
17 238
Password Spraying and MFA Bypasses https://www.sprocketsecurity.com/blog/how-to-bypass-mfa-all-day #ntlm #password #spraying #o365 #exchange #mfa

APT
17 238
Windows Security Log Quick Reference Cheat Sheet #windows #security #log #blueteam
Windows Security Log Quick Reference Cheat Sheet #windows #security #log #blueteam

APT
17 238
New article by our researchers Mikhail Klyuchnikov and Egor Dimitrenko about unauth RCEs in VMware products: "Hunting for bug
New article by our researchers Mikhail Klyuchnikov and Egor Dimitrenko about unauth RCEs in VMware products: "Hunting for bugs in VMware: View Planner and vRealize Business for Cloud". Read the article: https://swarm.ptsecurity.com/hunting-for-bugs-in-vmware-view-planner-and-vrealize-business-for-cloud/ This is the first article about our VMware research. More to come!

APT
17 238
KrbRelay The only public tool for relaying Kerberos tickets and the only relaying framework written in C#. https://github.com
KrbRelay The only public tool for relaying Kerberos tickets and the only relaying framework written in C#. https://github.com/cube0x0/KrbRelay #ad #kerberos #relay

APT
17 238
SpoolFool: Windows Print Spooler Privilege Escalation (CVE-2022–22718) Research: https://research.ifcr.dk/spoolfool-windows-p
SpoolFool: Windows Print Spooler Privilege Escalation (CVE-2022–22718) Research: https://research.ifcr.dk/spoolfool-windows-print-spooler-privilege-escalation-cve-2022-22718-bf7752b68d81 Exploit: https://github.com/ly4k/SpoolFool #windows #print #spooler #lpe #exploit

APT
17 238
EDRChecker Checks running processes, process metadata, Dlls loaded into your current process and the each DLLs metadata, comm
EDRChecker Checks running processes, process metadata, Dlls loaded into your current process and the each DLLs metadata, common install directories, installed services and each service binaries metadata, installed drivers and each drivers metadata, all for the presence of known defensive products such as AV's, EDR's and logging tools. C# https://github.com/PwnDexter/SharpEDRChecker PowerShell https://github.com/PwnDexter/Invoke-EDRChecker #edr #checker #csharp #powershell #tools

APT
17 238
Authentication and Authorization Testing Mindmap https://drive.google.com/file/d/1Jt1wzmgG3vDhU-vppms_KhP2ffvcMlD_/view #apps
Authentication and Authorization Testing Mindmap https://drive.google.com/file/d/1Jt1wzmgG3vDhU-vppms_KhP2ffvcMlD_/view #appsec #mindmap #auth #testing