ru
Feedback
APT

APT

Открыть в Telegram

This channel discusses: — Offensive Security — RedTeam — Malware Research — OSINT — etc Disclaimer: t.me/APT_Notes/6 Chat Link: t.me/APT_Notes_PublicChat

Больше

📈 Аналитический обзор Telegram-канала APT

Канал APT (@apt_notes) языкового сегмента Английский является активным участником. Сейчас сообщество объединяет 16 259 подписчиков, занимая 7 759 место в категории Технологии и приложения и 40 343 место в регионе Россия.

📊 Показатели аудитории и динамика

С момента создания невідомо проект демонстрирует стремительный рост, собрав аудиторию из 16 259 подписчиков.

Согласно последним данным от 31 августа, 2026, канал показывает стабильную активность. За последние 30 дней изменение числа участников составило 546, а за последние 24 часа — 11, при этом общий охват остаётся высоким.

  • Статус верификации: Не верифицирован
  • Уровень вовлечённости (ER): Средний показатель вовлечённости аудитории составляет 40.49%. В первые 24 часа после публикации контент обычно набирает 18.06% реакций от общего числа подписчиков.
  • Охват публикаций: В среднем каждый пост получает 6 579 просмотров. В течение первых суток публикация набирает 2 934 просмотров.
  • Реакции и взаимодействия: Аудитория активно поддерживает контент: среднее количество реакций на один пост — 26.

📝 Описание и контентная политика

Автор описывает ресурс как площадку для выражения субъективного мнения:
This channel discusses: — Offensive Security — RedTeam — Malware Research — OSINT — etc Disclaimer: t.me/APT_Notes/6 Chat Link: t.me/APT_Notes_PublicChat

Благодаря высокой частоте обновлений (последние данные получены 01 сентября, 2026) канал поддерживает актуальность и высокий уровень охвата публикаций. Аналитика показывает, что аудитория активно взаимодействует с контентом, что делает его важной точкой влияния в категории Технологии и приложения.

16 259
Подписчики
+1124 часа
+927 дней
+54630 день
Архив постов
APT
16 255
LOLBIN to dump LSASS Path: C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\Extensions\TestPlatform\Extens
LOLBIN to dump LSASS Path: C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\Extensions\TestPlatform\Extensions Binary: DumpMinitool.exe #lolbin #lsass #dump

APT
16 255
SpringShell: Spring Core RCE (CVE-2022-22963) PoC Payload: spring.cloud.function.routing-expression: T(java.lang.Runtime).get
SpringShell: Spring Core RCE (CVE-2022-22963) PoC Payload: spring.cloud.function.routing-expression: T(java.lang.Runtime).getRuntime().exec("xcalc") Research: https://www.cyberkendra.com/2022/03/springshell-rce-0-day-vulnerability.html Exploit: https://github.com/craig/SpringCore0day #spring #exploit #rce #cve

APT
16 255
Guest User abuse in Azure AD Dear BlueTeam, save yourself from the RedTeam and enable these settings in your Azure tenant! Ot
+1
Guest User abuse in Azure AD Dear BlueTeam, save yourself from the RedTeam and enable these settings in your Azure tenant! Otherwise, every "Guest" you invite in your Microsoft Team meetings can list users from other groups etc. #azure #teams #guest #redteam #blueteam

APT
16 255
PSSW100AVB This is the PSSW100AVB (Powershell Scripts With 100% AV Bypass) Framework. A list of useful Powershell scripts wit
PSSW100AVB This is the PSSW100AVB (Powershell Scripts With 100% AV Bypass) Framework. A list of useful Powershell scripts with 100% AV bypass ratio. (At the time of publication). Latest Reverse shell tested on Windows 11 (ReverseShell_2022_03.ps1) https://github.com/tihanyin/PSSW100AVB #av #evasion #amsi #powershell #ps1

APT
16 255
LDAP relays for initial foothold in dire situations https://offsec.almond.consulting/ldap-relays-for-initial-foothold-in-dire
LDAP relays for initial foothold in dire situations https://offsec.almond.consulting/ldap-relays-for-initial-foothold-in-dire-situations.html #ad #relay #attack #adcs #redteam

APT
16 255
CVE-2022-27666 This is the exploit for CVE-2022-27666, a vulnerability that achieves local privilege escalation on the latest Ubuntu Desktop 21.10. Research: https://etenal.me/archives/1825 Exploit: https://github.com/plummm/CVE-2022-27666 #ubuntu #lpe #linux

APT
16 255
Azure Dominance Paths You are looking for a comprehensive map of Azure and Azure AD attack paths? Look no further, this is th
Azure Dominance Paths You are looking for a comprehensive map of Azure and Azure AD attack paths? Look no further, this is the right blog for you. https://cloudbrothers.info/en/azure-dominance-paths/ #azure #cloud #redteam #blueteam

APT
16 255
CVE-2022-0995 This is my exploit for CVE-2022-0995, an heap out-of-bounds write in the watch_queue Linux kernel component. It
CVE-2022-0995 This is my exploit for CVE-2022-0995, an heap out-of-bounds write in the watch_queue Linux kernel component. It uses the same technique described in https://google.github.io/security-research/pocs/linux/cve-2021-22555/writeup.html. The exploit targets Ubuntu 21.10 with kernel 5.13.0-37. The exploit is not 100% reliable, you may need to run it a couple of times. It may panic the kernel, but during my tests it happened rarely. https://github.com/Bonfee/CVE-2022-0995 #linux #lpe #exploit #cve

APT
16 255
ntTraceControl — Powershell Event Tracing Toolbox Want to simulate any ETW logs using powershell, even the security one? Do y
ntTraceControl — Powershell Event Tracing Toolbox Want to simulate any ETW logs using powershell, even the security one? Do you want to import any evtx files into the current eventlog session? ntTraceControl is a set of Powershell commands to forge/generate Windows logs. Simply put, ntTraceControl supports Detection teams by simplifying the testing of detection use cases and alerts without using complex infrastructure, tools, or the testing of vulnerabilities. https://github.com/airbus-cert/ntTraceControl #etw #simulate #powershell #redteam #blueteam

APT
16 255
Windows Event Log Evasion via Native APIs Some native Windows API calls can be used to install services WITHOUT generating correlating entries in the event log. This was seen in Stuxnet. https://www.inversecos.com/2022/03/windows-event-log-evasion-via-native.html #edr #event #log #evasion

APT
16 255
Repost from PT SWARM
✅ A tip for obtaining NT hash from GenericWrite/All privileges. Works for both user and machine accounts.
✅ A tip for obtaining NT hash from GenericWrite/All privileges. Works for both user and machine accounts.

APT
16 255
OSINT Tip Quickly scrape email addresses from a site with this simple curl command cat targets.txt | xargs -n1 -I{} curl -s https://{} | grep -E -o "\b[a-zA-Z0-9.-]+@[a-zA-Z0-9.-]+\.[a-zA-Z0-9.-]+\b" | sort -u #osint #tip #curl #email #recon

APT
16 255
Relaying Kerberos over DNS using krbrelayx and mitm6 New method of gaining RCE on AD hosts in the same VLAN without credentials or needing NTLM, by abusing Kerberos, DNS and Active Directory Certificate Services. https://dirkjanm.io/relaying-kerberos-over-dns-with-krbrelayx-and-mitm6/ #ad #kerberos #relay #mitm6

APT
16 255
KnockOutlook KnockOutlook is a C# project that interacts with Outlook's COM object in order to perform a number of operations useful in red team engagements. https://github.com/eksperience/KnockOutlook #exchange #outlook #com #recon

APT
16 255
Fortinet Fortimail 7.0.1 — Reflected Cross-Site Scripting (CVE-2021-43062) An improper neutralization of input during web page generation vulnerability in FortiMail may allow an unauthenticated attacker to perform an XSS attack via crafted HTTP GET requests to the FortiGuard URI protection service. PoC: https://example/fmlurlsvc/?=&url=https%3A%2F%http://google.com%3CSvg%2Fonload%3Dalert(1)%3E Payload: https%3A%2F%http://google.com%3CSvg%2Fonload%3Dalert(1)%3E Dork: inurl:/fmlurlsvc/ #fortinet #forimail #xss

APT
16 255
Container Security Checklist Checklist for container security devsecops practices https://github.com/krol3/container-security-checklist #kubernetes #docker #security #cheatsheet #blueteam

APT
16 255
PowerRunAsSystem Run application as system with interactive system process support (active Windows session). This technique doesn't rely on any external tools and doesn't require a Microsoft Service. It spawns an NT Authority/System process using the Microsoft Windows Task Scheduler then upgrade to Interactive System Process using cool WinApi's (Run in Active Windows Session) https://github.com/DarkCoderSc/PowerRunAsSystem #windows #powershell #runas

APT
16 255
Bloodhound Custom Queries A combination of custom cypher queries from various sources for BloodHound, added categories to match newest version of BH. https://github.com/ZephrFish/Bloodhound-CustomQueries #ad #azure #bloodhound #queries

APT
16 255
Google Groups Dork Some Devs use "Google Groups" as a workplace because it is easy and free. But a lot of sensitive informati
Google Groups Dork Some Devs use "Google Groups" as a workplace because it is easy and free. But a lot of sensitive information is leaked Such as "access keys", "aws secrets" ...etc . Dork: site:http://groups.google.com "COMPANY" #osint #dorks #bugbounty

APT
16 255
Bypass 2FA Using noVNC Steal credentials and bypass 2FA by giving users remote access to your server via an HTML5 VNC client
Bypass 2FA Using noVNC Steal credentials and bypass 2FA by giving users remote access to your server via an HTML5 VNC client that has a browser running in kiosk mode. https://mrd0x.com/bypass-2fa-using-novnc/ #2fa #bypass #novnc