en
Feedback
APT

APT

Open in Telegram

This channel discusses: β€” Offensive Security β€” RedTeam β€” Malware Research β€” OSINT β€” etc Disclaimer: t.me/APT_Notes/6 Chat Link: t.me/APT_Notes_PublicChat

Show more

πŸ“ˆ Analytical overview of Telegram channel APT

Channel APT (@apt_notes) in the English language segment is an active participant. Currently, the community unites 14 682 subscribers, ranking 8 834 in the Technologies & Applications category and 45 554 in the Russia region.

πŸ“Š Audience metrics and dynamics

Since its creation on Π½Π΅Π²Ρ–Π΄ΠΎΠΌΠΎ, the project has demonstrated rapid growth, gathering an audience of 14 682 subscribers.

According to the latest data from 13 June, 2026, the channel demonstrates stable activity. Although there has been a change in the number of participants by 414 over the last 30 days and by 17 over the last 24 hours, overall reach remains high.

  • Verification status: Not verified
  • Engagement rate (ER): The average audience engagement rate is 50.76%. Within the first 24 hours after publication, content typically collects N/A% reactions from the total number of subscribers.
  • Post reach: On average, each post receives 7 449 views. Within the first day, a publication typically gains 0 views.
  • Reactions and interaction: The audience actively supports content: the average number of reactions per post is 20.

πŸ“ Description and content policy

The author describes the resource as a platform for expressing subjective opinions:
β€œThis channel discusses: β€” Offensive Security β€” RedTeam β€” Malware Research β€” OSINT β€” etc Disclaimer: t.me/APT_Notes/6 Chat Link: t.me/APT_Notes_PublicChat”

Thanks to the high frequency of updates (latest data received on 14 June, 2026), the channel maintains relevance and a high level of publication reach. Analytics show that the audience actively interacts with content, making it an important point of influence in the Technologies & Applications category.

14 682
Subscribers
+1724 hours
+1027 days
+41430 days
Posts Archive
APT
14 682
CloudSploit CloudSploit's remediation guides are intended to be an open-source resource for improving cloud security. Many cloud IaaS providers like AWS, Azure, and Google Cloud have a shared responsibility model. They provide the physical and architectural security, along with tools to properly secure the services they offer, but it is up to the user to configure those settings properly. https://github.com/aquasecurity/cloud-security-remediation-guides #cloud #security #remediation #blueteam

APT
14 682
moonwalk moonwalk is a 400 KB single-binary executable that can clear your traces while penetration testing a Unix machine. I
moonwalk moonwalk is a 400 KB single-binary executable that can clear your traces while penetration testing a Unix machine. It saves the state of system logs pre-exploitation and reverts that state including the filesystem timestamps post-exploitation leaving zero traces of a ghost in the shell. https://github.com/mufeedvh/moonwalk #unix #log #clearing #redteam

APT
14 682
SharpHookCheek Most EDR's hook Nt and Zw APIs to determine if a running program has malicious intent. This C# based script re
SharpHookCheek Most EDR's hook Nt and Zw APIs to determine if a running program has malicious intent. This C# based script returns a list of currently hooked APIs. https://gist.github.com/sbasu7241/4c2640fb6dd5bfdcfac07b83f1648ee0 #edr #hooks #csharp #maldev

APT
14 682
photo content

APT
14 682
Osmedeus Fully automated offensive security framework for reconnaissance and vulnerability scanning Features β€” Subdomain Scan
Osmedeus Fully automated offensive security framework for reconnaissance and vulnerability scanning Features β€” Subdomain Scan. β€” Subdomain TakeOver Scan. β€” Screenshot the target. β€” Basic recon like Whois, Dig info. β€” Web Technology detection. β€” IP Discovery. β€” CORS Scan. β€” SSL Scan. β€” Wayback Machine Discovery. β€” URL Discovery. β€” Headers Scan. β€” Port Scan. β€” Vulnerable Scan. β€” Seperate workspaces to store all scan output and details logging. β€” REST API. β€” React Web UI. β€” Support Continuous Scan. β€” Slack notifications. β€” Easily view report from commnad line. https://github.com/j3ssie/Osmedeus #osint #vulnerability #scanner #bugbounty

APT
14 682
Bug Bounty Tip β€” Log4j Vulnerability Cheatsheet β€” How It Works β€” Test Environments β€” Challenges & Labs (Rooms) β€” Where Payloa
Bug Bounty Tip β€” Log4j Vulnerability Cheatsheet β€” How It Works β€” Test Environments β€” Challenges & Labs (Rooms) β€” Where Payloads can be Injected β€” What Information can be Extracted β€” How To Identify (Services & Scanners) #log4j #cheatsheet #bugbounty

APT
14 682
Alternative Process Injection Process injection is a well-known defense evasion technique that has been used for decades to execute malicious code in a legitimate process. Until now, it is still a common technique used by hackers/red teamers. https://www.netero1010-securitylab.com/eavsion/alternative-process-injection #process #injection #maldev

APT
14 682
WindowsDllsExport A list of all the DLLs export in C:\windows\system32\ The idea is to find some interesting export that can
WindowsDllsExport A list of all the DLLs export in C:\windows\system32\ The idea is to find some interesting export that can be used to evade some detection. https://github.com/Mr-Un1k0d3r/WindowsDllsExport #winapi #dll #exports #pentest #redteam

APT
14 682
Native Function Static Map A *very* imperfect attempt to correlate Kernel32 function calls to native API (Nt/Zw) counterparts
Native Function Static Map A *very* imperfect attempt to correlate Kernel32 function calls to native API (Nt/Zw) counterparts/execution flow. # https://u5ksv.csb.app/ # https://github.com/EspressoCake/NativeFunctionStaticMap #mapping #pinvoke #winapi #maldev

APT
14 682
Auto-Elevate This tool demonstrates the power of UAC bypasses and built-in features of Windows. This utility auto-locates win
Auto-Elevate This tool demonstrates the power of UAC bypasses and built-in features of Windows. This utility auto-locates winlogon.exe, steals and impersonates it's process TOKEN, and spawns a new SYSTEM-level process with the stolen token. Combined with UAC bypass method #41 (ICMLuaUtil UAC bypass) from hfiref0x's UACME utility, this utility can auto-elevate a low privileged Administrative account to NT AUTHORITY\SYSTEM. https://github.com/FULLSHADE/Auto-Elevate #uac #bypass #windows #tools

APT
14 682
photo content

APT
14 682
DNS-Black-Cat Multi-platform toolkit for an interactive C2C DNS shell, by using DNS-Black-Cat, you will be able to execute system commands in shell mode over a fully encrypted covert channel. https://github.com/lawrenceamer/dns-black-cat #c2 #dns #redteam

APT
14 682
Quick & Lazy Malware Development https://capt-meelo.github.io//redteam/maldev/2021/12/15/lazy-maldev.html #malware #av #evasion #redteam

APT
14 682
PreAuth RCE in ManageEngine ServiceDesk Plus (CVE-2021-44077) PoC: https://github.com/horizon3ai/CVE-2021-44077 Research: https://xz.aliyun.com/t/10631 #manageengine #servicedesk #rce #cve

APT
14 682
Bypass AV & Advanced XDR solutions Mortar Loader is able to bypass modern anti-virus products and advanced XDR solutions and
Bypass AV & Advanced XDR solutions Mortar Loader is able to bypass modern anti-virus products and advanced XDR solutions and it has been tested and confirmed bypass for the following: β€” Kaspersky β€” ESET β€” Malewarebytes β€” Mcafee β€” Cortex XDR β€” Windows defender β€” Cylance Research: https://0xsp.com/security%20research%20&%20development%20(SRD)/defeat-the-castle-bypass-av-advanced-xdr-solutions Source: https://github.com/0xsp-SRD/mortar #av #xdr #evasion #redteam

APT
14 682
Data Masking Bash OneLiner If you need to mask data from utilities such as Responder\Inveigh for your report, use the followi
+1
Data Masking Bash OneLiner If you need to mask data from utilities such as Responder\Inveigh for your report, use the following command: cat hash.txt | awk -F ":" '{print $1"::"$3":"$4":"substr($5,1,4)"***"substr($6,20,20)"***"substr($6,length($6)-8,8)}' | sort -u | sort -u -t : -k 1,1 The following command can be used to mask data HashCat output: cat hash-hashcat.txt | awk -F ":" '{print ($3"/")$1":"substr($7,1,2)"******"substr($7,length($7)-1,3)}' | sort -u #report #mask #data #pentest

APT
14 682
Cobalt-Clip Cobalt-clip is clipboard addons for Cobalt Strike to interact with clipboard. With this you can dump, edit and monitor the content of clipboard. https://github.com/DallasFR/Cobalt-Clip #cobaltstrike #clipboard #dump

APT
14 682
log4hshell β€” Quick Guide https://musana.net/2021/12/13/log4shell-Quick-Guide/ #log4j #waf #bypass #bugbounty
log4hshell β€” Quick Guide https://musana.net/2021/12/13/log4shell-Quick-Guide/ #log4j #waf #bypass #bugbounty

APT
14 682
Basic RedTeam Enumeration Tactics https://aidenpearce369.github.io/offsec/redteam-enumeration/ #ad #enum #powershell #redteam

APT
14 682
Microsoft Teams Abuse https://mrd0x.com/microsoft-teams-abuse/ #teams #abuse #redteam