en
Feedback
APT

APT

Open in Telegram

This channel discusses: — Offensive Security — RedTeam — Malware Research — OSINT — etc Disclaimer: t.me/APT_Notes/6 Chat Link: t.me/APT_Notes_PublicChat

Show more
Russia40 343Technologies & Applications7 759

📈 Analytical overview of Telegram channel APT

Channel APT (@apt_notes) in the English language segment is an active participant. Currently, the community unites 16 267 subscribers, ranking 7 759 in the Technologies & Applications category and 40 343 in the Russia region.

📊 Audience metrics and dynamics

Since its creation on невідомо, the project has demonstrated rapid growth, gathering an audience of 16 267 subscribers.

According to the latest data from 31 August, 2026, the channel demonstrates stable activity. Although there has been a change in the number of participants by 546 over the last 30 days and by 11 over the last 24 hours, overall reach remains high.

  • Verification status: Not verified
  • Engagement rate (ER): The average audience engagement rate is 40.49%. Within the first 24 hours after publication, content typically collects 18.06% reactions from the total number of subscribers.
  • Post reach: On average, each post receives 6 579 views. Within the first day, a publication typically gains 2 934 views.
  • Reactions and interaction: The audience actively supports content: the average number of reactions per post is 26.

📝 Description and content policy

The author describes the resource as a platform for expressing subjective opinions:
“This channel discusses: — Offensive Security — RedTeam — Malware Research — OSINT — etc Disclaimer: t.me/APT_Notes/6 Chat Link: t.me/APT_Notes_PublicChat”

Thanks to the high frequency of updates (latest data received on 01 September, 2026), the channel maintains relevance and a high level of publication reach. Analytics show that the audience actively interacts with content, making it an important point of influence in the Technologies & Applications category.

16 267
Subscribers
+1124 hours
+927 days
+54630 days
Posts Archive
APT
APT
16 267
DetectionLab DetectionLab is a repository containing a variety of Packer, Vagrant, Powershell, Ansible, and Terraform scripts
DetectionLab DetectionLab is a repository containing a variety of Packer, Vagrant, Powershell, Ansible, and Terraform scripts that allow you to automate the process of bringing an ActiveDirectory environment online complete with logging and security tooling using a variety of different platforms. DetectionLab can currently be deployed to the following platforms: — Virtualbox (Windows, MacOS, Linux) — VMware Workstation/Fusion (Windows, MacOS, Linux) — HyperV — ESXi — AWS — Azure — LibVirt (Not officially supported) — Proxmox (Not officially supported) https://detectionlab.network/ #lab #cloud #blueteam #redteam

APT
APT
16 267
MultiPotato Another Potato to get SYSTEM via SeImpersonate privileges https://github.com/S3cur3Th1sSh1t/MultiPotato #windows
MultiPotato Another Potato to get SYSTEM via SeImpersonate privileges https://github.com/S3cur3Th1sSh1t/MultiPotato #windows #lpi #potato #tools

APT
APT
16 267
Arsenal of AWS Security Tools List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc. https://github.com/toniblyx/my-arsenal-of-aws-security-tools #aws #security #benchmarks #blueteam

APT
APT
16 267
A (not so deep) Dive into Grafana CVE-2021-43798 This post will cover some details behind the recent Grafana vulnerability (CVE-2021-43798), which is a directory traversal bug allowing unauthenticated attackers to read files on the target server filesystem. This post will also discuss some real world scenario and attack surface of the Grafana. https://nusgreyhats.org/posts/writeups/a-not-so-deep-dive-in-to-grafana-cve-2021-43798/ #grafana #lfi #cve

APT
APT
16 267
Windows 10 Hardening The project started as a simple hardening list for Windows 10. After some time, HardeningKitty was created to simplify the hardening of Windows. Now, HardeningKitty supports guidelines from Microsoft, CIS Benchmarks, DoD STIG and BSI SiSyPHuS Win10 https://github.com/0x6d69636b/windows_hardening/ #blueteam #windows #hardening #benchmarks

APT
APT
16 267
ADCS: Playing with ESC4 Enumeration and abuse of Linux-based ADCS ESC4 Research: https://www.fortalicesolutions.com/posts/adcs-playing-with-esc4 Source: https://github.com/fortalice/modifyCertTemplate #adcs #abuse #pentest #tools

APT
APT
16 267
Docem A utility to embed XXE and XSS payloads in docx, odt, pptx, etc - any documents that is a zip archive with bunch of xml
Docem A utility to embed XXE and XSS payloads in docx, odt, pptx, etc - any documents that is a zip archive with bunch of xml files inside. https://github.com/whitel1st/docem #xxe #xss #doc #file #upload

APT
APT
16 267
Invoke-WinSATBypass This script will create a mock directory of "C:\Windows\System32" and copy a legitimate application of Windows (WinSAT.exe) into it. It will after try to download a DLL called version.dll, which is loaded by default by WinSAT.exe, in order to perform a UAC Bypass by doing some DLL Hijacking. https://github.com/b4keSn4ke/Invoke-WinSATBypass #uac #bypass #winsat #tools

APT
APT
16 267
#tools CVE Trends One cool guy made this tool to monitor CVE trends in twitter. He shared this tool in his russian channel. h
#tools CVE Trends One cool guy made this tool to monitor CVE trends in twitter. He shared this tool in his russian channel. https://cvetrends.com/

APT
APT
16 267
mssqlproxy Toolkit aimed to perform lateral movement in restricted environments through a compromised Microsoft SQL Server vi
mssqlproxy Toolkit aimed to perform lateral movement in restricted environments through a compromised Microsoft SQL Server via socket reuse. The client requires impacket and sysadmin privileges on the SQL server. https://github.com/blackarrowsec/mssqlproxy #mssql #proxy #pentest #tools

APT
APT
16 267
RogueAssemblyHunter Rogue Assembly Hunter is a utility for discovering 'interesting' .NET CLR modules in running processes. https://github.com/bohops/RogueAssemblyHunter #dotnet #blueteam #threadhunting

APT
APT
16 267
CloudSploit CloudSploit's remediation guides are intended to be an open-source resource for improving cloud security. Many cloud IaaS providers like AWS, Azure, and Google Cloud have a shared responsibility model. They provide the physical and architectural security, along with tools to properly secure the services they offer, but it is up to the user to configure those settings properly. https://github.com/aquasecurity/cloud-security-remediation-guides #cloud #security #remediation #blueteam

APT
APT
16 267
moonwalk moonwalk is a 400 KB single-binary executable that can clear your traces while penetration testing a Unix machine. I
moonwalk moonwalk is a 400 KB single-binary executable that can clear your traces while penetration testing a Unix machine. It saves the state of system logs pre-exploitation and reverts that state including the filesystem timestamps post-exploitation leaving zero traces of a ghost in the shell. https://github.com/mufeedvh/moonwalk #unix #log #clearing #redteam

APT
APT
16 267
SharpHookCheek Most EDR's hook Nt and Zw APIs to determine if a running program has malicious intent. This C# based script re
SharpHookCheek Most EDR's hook Nt and Zw APIs to determine if a running program has malicious intent. This C# based script returns a list of currently hooked APIs. https://gist.github.com/sbasu7241/4c2640fb6dd5bfdcfac07b83f1648ee0 #edr #hooks #csharp #maldev

APT
APT
16 267
photo content

APT
APT
16 267
Osmedeus Fully automated offensive security framework for reconnaissance and vulnerability scanning Features — Subdomain Scan
Osmedeus Fully automated offensive security framework for reconnaissance and vulnerability scanning Features — Subdomain Scan. — Subdomain TakeOver Scan. — Screenshot the target. — Basic recon like Whois, Dig info. — Web Technology detection. — IP Discovery. — CORS Scan. — SSL Scan. — Wayback Machine Discovery. — URL Discovery. — Headers Scan. — Port Scan. — Vulnerable Scan. — Seperate workspaces to store all scan output and details logging. — REST API. — React Web UI. — Support Continuous Scan. — Slack notifications. — Easily view report from commnad line. https://github.com/j3ssie/Osmedeus #osint #vulnerability #scanner #bugbounty

APT
APT
16 267
Bug Bounty Tip — Log4j Vulnerability Cheatsheet — How It Works — Test Environments — Challenges & Labs (Rooms) — Where Payloa
Bug Bounty Tip — Log4j Vulnerability Cheatsheet — How It Works — Test Environments — Challenges & Labs (Rooms) — Where Payloads can be Injected — What Information can be Extracted — How To Identify (Services & Scanners) #log4j #cheatsheet #bugbounty

APT
APT
16 267
Alternative Process Injection Process injection is a well-known defense evasion technique that has been used for decades to execute malicious code in a legitimate process. Until now, it is still a common technique used by hackers/red teamers. https://www.netero1010-securitylab.com/eavsion/alternative-process-injection #process #injection #maldev

APT
APT
16 267
WindowsDllsExport A list of all the DLLs export in C:\windows\system32\ The idea is to find some interesting export that can
WindowsDllsExport A list of all the DLLs export in C:\windows\system32\ The idea is to find some interesting export that can be used to evade some detection. https://github.com/Mr-Un1k0d3r/WindowsDllsExport #winapi #dll #exports #pentest #redteam

APT
APT
16 267
Native Function Static Map A *very* imperfect attempt to correlate Kernel32 function calls to native API (Nt/Zw) counterparts
Native Function Static Map A *very* imperfect attempt to correlate Kernel32 function calls to native API (Nt/Zw) counterparts/execution flow. # https://u5ksv.csb.app/ # https://github.com/EspressoCake/NativeFunctionStaticMap #mapping #pinvoke #winapi #maldev