fa
Feedback
APT

APT

رفتن به کانال در Telegram

This channel discusses: — Offensive Security — RedTeam — Malware Research — OSINT — etc Disclaimer: t.me/APT_Notes/6 Chat Link: t.me/APT_Notes_PublicChat

نمایش بیشتر
روسيا40 381فناوری و برنامه‌ها7 769

📈 تحلیل کانال تلگرام APT

کانال APT (@apt_notes) در بخش زبانی انگلیسی بازیگری فعال است. در حال حاضر جامعه شامل 16 249 مشترک است و جایگاه 7 769 را در دسته فناوری و برنامه‌ها و رتبه 40 381 را در منطقه روسيا دارد.

📊 شاخص‌های مخاطب و پویایی

از زمان ایجاد در невідомо، پروژه رشد سریعی داشته و 16 249 مشترک جذب کرده است.

بر اساس آخرین داده‌ها در تاریخ 30 اوت, 2026، کانال فعالیت پایداری دارد. در ۳۰ روز گذشته تغییر اعضا برابر 549 و در ۲۴ ساعت گذشته برابر 10 بوده و همچنان دسترسی گسترده‌ای حفظ شده است.

  • وضعیت تأیید: تأیید نشده
  • نرخ تعامل (ER): میانگین تعامل مخاطب 39.89% است و در ۲۴ ساعت نخست پس از انتشار، محتوا معمولاً 18.07% واکنش نسبت به کل مشترکان کسب می‌کند.
  • دسترسی پست‌ها: هر پست به طور میانگین 6 477 بازدید دریافت می‌کند. در اولین روز معمولاً 2 934 بازدید جمع‌آوری می‌شود.
  • واکنش‌ها و تعامل: مخاطبان به‌طور فعال حمایت می‌کنند؛ میانگین واکنش به هر پست 26 است.

📝 توضیح و سیاست محتوایی

نویسنده این فضا را محل بیان دیدگاه‌های شخصی توصیف می‌کند:
“This channel discusses: — Offensive Security — RedTeam — Malware Research — OSINT — etc Disclaimer: t.me/APT_Notes/6 Chat Link: t.me/APT_Notes_PublicChat”

به لطف به‌روزرسانی‌های پرتکرار (آخرین داده در تاریخ 31 اوت, 2026)، کانال همواره به‌روز و دارای دسترسی بالاست. تحلیل‌ها نشان می‌دهد مخاطبان به‌طور فعال با محتوا تعامل دارند و آن را به نقطه اثرگذاری مهم در دسته فناوری و برنامه‌ها تبدیل کرده‌اند.

16 249
مشترکین
+1024 ساعت
+957 روز
+54930 روز
آرشیو پست ها
APT
APT
16 249
📜 Abuse AD CS via dNSHostName Spoofing This blog covers the technical details of CVE-2022-26923. Active Directory Domain Ser
📜 Abuse AD CS via dNSHostName Spoofing This blog covers the technical details of CVE-2022-26923. Active Directory Domain Services Elevation of Privilege Vulnerability via AD CS dNSHostName Spoofing. https://research.ifcr.dk/certifried-active-directory-domain-privilege-escalation-cve-2022-26923-9e098fe298f4 #ad #adcs #privesc #redteam

APT
APT
16 249
🛠️ Cobalt Strike and BloodHound Integration PyCobaltHound is an Aggressor script, an extension to CobaltStrike that allows y
🛠️ Cobalt Strike and BloodHound Integration PyCobaltHound is an Aggressor script, an extension to CobaltStrike that allows you to integrate with BloodHound so that you can request and receive reports from the same interface. Features: — Automatically querying the BloodHound database to discover escalation paths opened up by newly collected credentials. — Automatically marking compromised users and computers as owned. — Allowing operators to quickly and easily investigate the escalation potential of beacon sessions and users. https://github.com/NVISOsecurity/pyCobaltHound #cobaltstrike #bloodhound #redteam

APT
APT
16 249
🛡️Defending the Three Headed Relay This blog discusses possible attack paths and various protections associated with Kerbero
🛡️Defending the Three Headed Relay This blog discusses possible attack paths and various protections associated with Kerberos Relay activity. https://jsecurity101.medium.com/defending-the-three-headed-relay-17e1d6b6a339 #ad #kerberos #relay #mitigation #blueteam

APT
APT
16 249
Repost from SHADOW:Group
🧨 RCE в BIG-IP iControl REST (CVE-2022-1388) Эта уязвимость может позволить неаутентифицированному злоумышленнику с сетевым доступом к системе BIG-IP выполнять произвольные системные команды, создавать или удалять файлы или отключать службы (CVE-2022-1388) Дорк для Shodan: http.title:"BIG-IP®-+Redirect" +"Server" PoC представлен на изображении ниже или по ссылке. Ссылка на PoC #web #cve #rce

APT
APT
16 249
⏱ Scheduled Task Tampering In this post we will explore two approaches that can be used to achieve the same result: create or modify a scheduled task and execute it, without generating the relevant telemetry. First, we will explore how direct registry manipulation could be used to create or modify tasks and how this did not generate the usual entries in the eventlog. Finally, an alternative route based on tampering with the Task Scheduler ETW will be presented that will completely suppress most of logging related to the Task Scheduler. https://labs.f-secure.com/blog/scheduled-task-tampering/ #windows #schedule #task #redteam #blueteam

APT
APT
16 249
📒 Enabling ADCS Audit Auditing is not enabled by default in AD CS. For some mysterious reason, Microsoft has decided to not
+1
📒 Enabling ADCS Audit Auditing is not enabled by default in AD CS. For some mysterious reason, Microsoft has decided to not enable AD CS auditing OOB. To find the issue, run this command on every one of your CAs: 
certutil -getreg CA\AuditFilter
To enable all auditing, do this: certutil –setreg CA\AuditFilter 127 net stop certsvc net start certsvc You'll also need to enable the Certificate Service advanced auditing subcategories in a GPO linked to the OU containing your CA host objects (Figure 1). Lastly, enforce the advanced auditing subcategories! All of your previous work will be for naught if you don't enforce (Figure 2). #adcs #audit #recommendations #blueteam

APT
APT
16 249
SharpHound Cheat Sheet https://github.com/SadProcessor/HandsOnBloodHound/blob/master/BH21/BH4_SharpHound_Cheat_Dark.pdf #shar

APT
APT
16 249
NTLMRelay2Self over HTTP Just a walkthrough of how to escalate privileges locally by forcing the system you landed initial access on to reflectively authenticate over HTTP to itself and forward the received connection to an HTTP listener (ntlmrelayx) configured to relay to DC servers over LDAP/LDAPs for either setting shadow credentials or configuring RBCD. https://github.com/med0x2e/NTLMRelay2Self #ad #ntlm #relay #rbcd #redteam

APT
APT
16 249
Repost from r0 Crew (Channel)
Convert curl commands to Python, JavaScript, PHP, R, Go, Rust, Elixir, Java, MATLAB, Dart, CFML, Ansible URI, Strest or JSON Web (Live Demo): https://curlconverter.com/ Project: https://github.com/curlconverter/curlconverter #tool #converter #curl #darw1n

APT
APT
16 249
KrbRelay with RBCD Privilege Escalation The short step-by-step writeup about how to do the LPE with KrbRelay + RBCD on a doma
+2
KrbRelay with RBCD Privilege Escalation The short step-by-step writeup about how to do the LPE with KrbRelay + RBCD on a domain-joined machine using KrbRelay + Rubeus: https://gist.github.com/tothi/bf6c59d6de5d0c9710f23dae5750c4b9 #ad #kerberos #relay #rbcd #redteam

APT
APT
16 249
Wordlists Dictionaries of attack patterns and primitives for black-box application fault injection and resource discovery. https://github.com/fuzzdb-project/fuzzdb https://github.com/Karanxa/Bug-Bounty-Wordlists https://github.com/orwagodfather/WordList https://wordlists.assetnote.io/ #wordlist #fuzzing #bugbounty

APT
APT
16 249
NTLM Relay This article is not meant to be a tutorial to be followed in order to carry out a successful attack, but it will allow the reader to understand in detail the technical details of this attack, its limitations, and can be a basis to start developing his own tools, or understand how current tools work. https://en.hackndo.com/ntlm-relay/ #ad #relay #ntlm #ntlmrelay

APT
APT
16 249
Repost from 1N73LL1G3NC3

APT
APT
16 249
KrbRelayUp Universal no-fix local privilege escalation in windows domain environments where LDAP signing is not enforced (the
KrbRelayUp Universal no-fix local privilege escalation in windows domain environments where LDAP signing is not enforced (the default settings) https://github.com/Dec0ne/KrbRelayUp #ad #privesc #kerberos #ldap #relay

APT
APT
16 249
Repost from 1N73LL1G3NC3
Windows Event logs Cheat Sheet

APT
APT
16 249
Hashcat Cheat Sheet https://www.blackhillsinfosec.com/wp-content/uploads/2020/09/HashcatCheatSheet.v2018.1b.pdf #hashcat #che

APT
APT
16 249
Abusing LNK "Features" for Initial Access and Persistence https://v3ded.github.io/redteam/abusing-lnk-features-for-initial-access-and-persistence #windows #lnk #persistence #redteam

APT
APT
16 249
Invoke-SocksProxy The reverse proxy creates a tcp tunnel by initiating outbond SSL connections that can go through the system's proxy. The tunnel can then be used as a socks proxy on the remote host to pivot into the local host's network. https://github.com/p3nt4/Invoke-SocksProxy #powershell #socks #proxy #tools

APT
APT
16 249
WSO2 RCE (CVE-2022-29464) Critical vulnerability on WSO2 discovered by Orange Tsai. the vulnerability is an unauthenticated unrestricted arbitrary file upload which which allows unauthenticated attackers to gain RCE on WSO2 servers via uploading malicious JSP files. Google Dorks: 
inurl:"/carbon/admin/login.jsp"
inurl:"/authenticationendpoint/login.do"
inurl:"devportal/apis"
intitle:"API Publisher- Login"
intitle:"WSO2 Management Console"
https://github.com/hakivvi/CVE-2022-29464 #wso2 #rce #exploit

APT
APT
16 249
KernelCallbackTable Injection KernelCallbackTable which could be abused to inject shellcode in a remote process. This method of process injection was used by FinFisher/FinSpy and Lazarus. https://captmeelo.com/redteam/maldev/2022/04/21/kernelcallbacktable-injection.html #edr #bypass #injection #cpp #maldev