en
Feedback
APT

APT

Open in Telegram

This channel discusses: — Offensive Security — RedTeam — Malware Research — OSINT — etc Disclaimer: t.me/APT_Notes/6 Chat Link: t.me/APT_Notes_PublicChat

Show more
Russia45 663Technologies & Applications8 841

📈 Analytical overview of Telegram channel APT

Channel APT (@apt_notes) in the English language segment is an active participant. Currently, the community unites 14 653 subscribers, ranking 8 841 in the Technologies & Applications category and 45 663 in the Russia region.

📊 Audience metrics and dynamics

Since its creation on невідомо, the project has demonstrated rapid growth, gathering an audience of 14 653 subscribers.

According to the latest data from 11 June, 2026, the channel demonstrates stable activity. Although there has been a change in the number of participants by 406 over the last 30 days and by 16 over the last 24 hours, overall reach remains high.

  • Verification status: Not verified
  • Engagement rate (ER): The average audience engagement rate is 48.83%. Within the first 24 hours after publication, content typically collects N/A% reactions from the total number of subscribers.
  • Post reach: On average, each post receives 7 154 views. Within the first day, a publication typically gains 0 views.
  • Reactions and interaction: The audience actively supports content: the average number of reactions per post is 18.

📝 Description and content policy

The author describes the resource as a platform for expressing subjective opinions:
“This channel discusses: — Offensive Security — RedTeam — Malware Research — OSINT — etc Disclaimer: t.me/APT_Notes/6 Chat Link: t.me/APT_Notes_PublicChat”

Thanks to the high frequency of updates (latest data received on 12 June, 2026), the channel maintains relevance and a high level of publication reach. Analytics show that the audience actively interacts with content, making it an important point of influence in the Technologies & Applications category.

14 653
Subscribers
+1624 hours
+1087 days
+40630 days
Posts Archive
APT
APT
14 658
🪄 Red Wizard This tool automates the deployment of a comprehensive infrastructure with redirectors, backend systems, phishin
🪄 Red Wizard This tool automates the deployment of a comprehensive infrastructure with redirectors, backend systems, phishing relays, OSINT machines, and more. It is designed to be user-friendly, providing wizards to walk administrators and Red Team operators through the deployment process. The infrastructure is also self-documenting, making the sharing of all relevant details to the team of operators an effortless task. 🌐 Details: https://www.secura.com/blog/red-wizard-1 #redteam #relay #infrastructure #phishing

APT
APT
14 658
Repost from Offensive Xwitter
Шпаргалка по быстрому развертыванию старой Убунты Зачем? Статистика не врет – бо́льшая часть проломов с внешки начинается с дырявого веба. Веб же, в основном, крутится на *NIX-ах, и чаще всего, на жесть как не до конца обновленных. К сожалению (нет, на самом деле, к частью), реал-лайф отличается от CTF-таска, поэтому нестандартного SUID-ника / сплойтабельной cron-задачи / нестойкого sudo -l правила найти удается далеко не всегда, а залутаться от рута ой как хочется. Следовательно, если сходу не взлетает PwnKit, linPEAS (по секрету) запускать никто не будет, ведь ядерным сплоитом проще и быстрее. Однако, предвосхищая контраргументы на тему небезопасности их применения, ядерные уязвимости требуют бережного использования в проде. Обычно под этим подразумевается предварительное тестирование оных на подготовленном стенде с продовым сетапом (ревизия ОС, версия ядра). На примере Убунты покажем, как быстро задеплоить такой стенд. 1. Смотрим ОС и ядро на таргете: 
$ cat /etc/os-release
$ uname -a
2. Идем на old-releases.ubuntu.com и хватаем нужный ISO-шник торрентом, разворачиваем на ВМ. 3. Меняем репозитории системных пакетов на архивные: 
$ sudo sed -i -re 's/([a-z]{2}\.)?archive.ubuntu.com|security.ubuntu.com/old-releases.ubuntu.com/g' /etc/apt/sources.list
$ sudo apt-get update
4. Накатываем нужное ядро: 
$ sudo apt-get install linux-image-$(uname -r)
5. Правим настройки GRUB, чтобы при загрузке иметь возможность свичнуть ядро: 
$ gksudo gedit /etc/default/grub
--> GRUB_TIMEOUT=-1
--> #GRUB_HIDDEN_TIMEOUT=0
$ sudo update-grub
$ sudo reboot  # (on boot select the kernel from "Previous Linux versions")
6. Ставим метапакеты компиляции и gcc-multilib на случай, если древний сплоит будет собираться с -m32: 
$ sudo apt-get install build-essential gcc-multilib
В среднем процесс занимает не более 15 минут вместе с загрузкой образа и адаптацией команд выше под тестируемый дистрибутив. P. S. Если версия ОСи достаточно старая, чтобы libssl не дал скачать сорцы с Гитхаба с помощью wget/curl (i. e., не поддерживает хотя бы TLSv1.2), репозитории можно клонировать, отключив в клиенте гита проверку SSL-ей (для гетов/курлов такое не прокатит – все равно обосрутся): 
$ export GIT_SSL_NO_VERIFY=1
$ git clone https://github.com/<EXP_AUTHOR>/<EXP_REPO>

APT
APT
14 658
🐧 Linux Kernel Syscalls Very useful website if you need a quick reference to Linux kernel syscalls (numbers and parameters f
🐧 Linux Kernel Syscalls Very useful website if you need a quick reference to Linux kernel syscalls (numbers and parameters for various architectures and kernel versions) 🌐 Details: https://syscalls.mebeim.net/ #linux #kernel #syscall

APT
APT
14 658
Repost from Cybred
Black Hat USA 2023 Schedule Presentations DEF CON 31 Schedule Presentations Расписание (с описанием докладов) и презентации с
Black Hat USA 2023 Schedule Presentations DEF CON 31 Schedule Presentations Расписание (с описанием докладов) и презентации с Black Hat USA 2023 & DEF CON 31

APT
APT
14 658
🛠 From C to Shellcode: Crafting Position-Independent Code Ever wondered how malware developers create shellcode? Dive into the world of Position-Independent Code (PIC) and learn about a shellcode development method using MinGW. This approach combines assembly and C to create efficient and stealthy payloads. 🌐 Details: https://steve-s.gitbook.io/0xtriboulet/just-malicious/from-c-with-inline-assembly-to-shellcode #maldev #clang #shellcode #asssembly

APT
APT
14 658
🔐 Exploiting SCCM’s AdminService API for Site Takeover 🔐 Extensive research into SCCM services has revealed a security flaw within the AdminService API, exploiting the authentication process and leading to unauthorized access. The AdminService API, backed by Microsoft Negotiate authentication, could be leveraged by malicious actors for privilege escalation, granting unauthorized Full Administrator privileges on the targeted site. 🌐 Details: https://posts.specterops.io/site-takeover-via-sccms-adminservice-api-d932e22b2bf #ad #sccm #site #takeover

APT
APT
14 658
🐕 BloodHound CE: A New Era! Discover the latest update of BloodHound - now called BloodHound Community Edition (CE). Here's
🐕 BloodHound CE: A New Era! Discover the latest update of BloodHound - now called BloodHound Community Edition (CE). Here's what you need to know: 🚀 Key Features: — Enhanced GUI for a user-friendly experience — New containerized architecture for streamlined deployment — Cached query results for boosted performance — User management, multi-factor authentication, and SAML authentication More about it https://posts.specterops.io/bloodhound-community-edition-a-new-era-d64689806e90 #ad #bloodhound

APT
APT
14 658
Repost from 𝖝𝖓𝖝 𝖘𝖔𝖋𝖙𝖜𝖆𝖗𝖊 𝖋𝖔𝖚𝖓𝖉𝖆𝖙𝖎𝖔𝖓
Буквально недавно OWASP выкатили релиз Security Top 10 для API. Измения не сильно большие, нарисовала картиночку для наглядно
Буквально недавно OWASP выкатили релиз Security Top 10 для API. Измения не сильно большие, нарисовала картиночку для наглядности 😈 Подробности в доках https://owasp.org/API-Security/editions/2023/en/0x00-notice/ 🥰 всем пис 🥰

APT
APT
14 658
Repost from 1N73LL1G3NC3
D1rkInject Another approach of Threadless injection that loads a module into the target process and stomps it, and reverting back memory protections and original memory state

APT
APT
14 658
🍅 S4UTomato — Escalate Service Account To LocalSystem via Kerberos Learn how to leverage Kerberos for privilege escalation in a Windows domain environment using virtual accounts with the help of Resource-based Constrained Delegation, Shadow Credentials, and Tgtdeleg techniques. https://github.com/wh0amitz/S4UTomato #ad #privesc #kerberos #windows

APT
APT
14 658
Ⓜ️ Metabase Pre-auth RCE Earlier this week, it was reported that Metabase open source before 0.46.6.1 and Metabase Enterprise
Ⓜ️ Metabase Pre-auth RCE Earlier this week, it was reported that Metabase open source before 0.46.6.1 and Metabase Enterprise before 1.46.6.1 has a vulnerability that allows attackers to execute arbitrary commands on the server, at the server's privilege level. Authentication is not required for exploitation. This vulnerability was designated as CVE-2023-38646. Research: https://blog.calif.io/p/reproducing-cve-2023-38646-metabase PoC: https://gist.github.com/testanull/a7beb2777bbf550f3cf533d2794477fe #metabase #cve #poc #rce

APT
APT
14 658
🔨KRBUACBypass By adding a KERB-AD-RESTRICTION-ENTRY to the service ticket, but filling in a fake MachineID, we can easily bypass UAC and gain SYSTEM privileges. Research: https://www.tiraniddo.dev/2022/03/bypassing-uac-in-most-complex-way.html Source: https://github.com/wh0amitz/KRBUACBypass #ad #kerberos #uac #bypass

APT
APT
14 658
🔑 WSPCoerce You can use the Windows Search Protocol to coerce authentication from hosts running the Windows Search Service (
🔑 WSPCoerce You can use the Windows Search Protocol to coerce authentication from hosts running the Windows Search Service (Win10/11 only by default) as a regular domain user. https://github.com/slemire/WSPCoerce #ad #relay #mswsp #poc

APT
APT
14 658
Repost from 1N73LL1G3NC3
TGSThief I think a lot of people have seen the project GIUDA . It is an interesting way to get the TGS of a user whose logon
TGSThief I think a lot of people have seen the project GIUDA . It is an interesting way to get the TGS of a user whose logon session is just present on the computer. The problem is that its code is written in Pascal, so I had to rewrite the project in C++. How to use: Just run the tool and select the desired logon session! The tool will automatically escalate privileges and request a TGS. Advantages: - We do not need to run the code on behalf of the system. Run the program as a local administrator, the privilege escalation will happen automatically. - I also added SPN validation through regex, so there is less chance of making a mistake and not getting TGS. - The TGS ticket is optionally injected into the logon session where the tool is running. The TGS ticket is simply output in base64 for convenience, and only embedded if required. - It is not necessary to run the tool ten times to see the LUID. You can now select the LUID you want from the drop down list. Thanks to: @Michaelzhm

APT
APT
14 658
Repost from Ralf Hacker Channel
Если есть привилегия SeTcbPrivilege (а локальный админ может ее активировать), то можно запросить TGS билет для любого авторизованного в системе пользователя без указания его пароля. Интересный сценарий... https://github.com/foxlox/GIUDA #ad #pentest #redteam #soft #git

APT
APT
14 658
Repost from cobaltstrike

APT
APT
14 658
⛓ Divide and Rule — AMSI Bypass By spliiting well known PowerShell scripts, e.g. an AMSI Bypass, we can directly bypass Windo
⛓ Divide and Rule — AMSI Bypass By spliiting well known PowerShell scripts, e.g. an AMSI Bypass, we can directly bypass Windows Defender or get at least the line, where the detection occurs. Outcome: Several AMSI Bypasses and two scripts: - One to split PowerShell snippets in multiple lines - A second script to run all the files in an Oneliner, XOR obfuscated https://badoption.eu/blog/2023/07/15/divideconqer.html #amsi #av #bypass #powershell

APT
APT
14 658
🔥 Shodan is giving away a $5 Membership subscription The sale lasts until July 17 23:59 UTC https://twitter.com/shodanhq/sta
🔥 Shodan is giving away a $5 Membership subscription The sale lasts until July 17 23:59 UTC https://twitter.com/shodanhq/status/1680723526494609409 
Пора пилить свой Shodan ^_^

APT
APT
14 658
Repost from 1N73LL1G3NC3
100 Methods for Container Attacks(RTC0010) Container escape, tampering, insecure orchestration and etc.

APT
APT
14 658
🎯 Meterpreter vs Modern EDR This blog post explains how making minor adjustments to the Meterpreter shellcode dropper can effectively evade modern EDRs. Three modifications are employed on the Meterpreter reference dropper. These modifications involve encrypting the Meterpreter shellcode using the XOR algorithm, incorporating valid metadata via a manifest file, and relocating the Meterpreter shellcode from the .text section to the .data section. https://redops.at/en/blog/meterpreter-vs-modern-edrs-in-2023 #av #edr #meterpreter #xor #cpp