APT
This channel discusses: — Offensive Security — RedTeam — Malware Research — OSINT — etc Disclaimer: t.me/APT_Notes/6 Chat Link: t.me/APT_Notes_PublicChat
Ko'proq ko'rsatish📈 Telegram kanali APT analitikasi
APT (@apt_notes) Ingliz til segmentidagi kanali faol ishtirokchi. Hozirda hamjamiyat 14 979 obunachidan iborat bo'lib, Texnologiyalar & Aralashmalar toifasida 8 644-o'rinni va Rossiya mintaqasida 44 474-o'rinni egallagan.
📊 Auditoriya ko‘rsatkichlari va dinamika
невідомо sanasidan buyon loyiha tez o‘sib, 14 979 obunachiga ega bo‘ldi.
26 Iyun, 2026 dagi oxirgi ma’lumotlarga ko‘ra kanal barqaror faollikka ega. Oxirgi 30 kunda obunachilar soni 531 ga, so‘nggi 24 soatda esa 59 ga o‘zgardi va umumiy qamrov yuqori darajada qolmoqda.
- Tasdiqlash holati: Tasdiqlanmagan
- Jalb etish (ER): Auditoriya o‘rtacha 40.41% darajada jalb etiladi. Nashrdan keyingi dastlabki 24 soatda kontent odatda umumiy obunachilar sonining 6.46% ini tashkil etuvchi reaksiyalarni to‘playdi.
- Post qamrovi: Har bir post o‘rtacha 0 marta ko‘riladi; birinchi sutkada odatda 965 ta ko‘rish yig‘iladi.
- Reaksiyalar va o‘zaro ta’sir: Auditoriya faol: har bir postga o‘rtacha 0 ta reaksiya keladi.
📝 Tavsif va kontent siyosati
Muallif resursni shaxsiy fikrni ifoda etish maydoni sifatida ta’riflaydi:
“This channel discusses:
— Offensive Security
— RedTeam
— Malware Research
— OSINT
— etc
Disclaimer:
t.me/APT_Notes/6
Chat Link:
t.me/APT_Notes_PublicChat”
Yuqori yangilanish chastotasi (oxirgi ma’lumot 27 Iyun, 2026 da olingan) sababli kanal doimo dolzarb va katta qamrovli bo‘lib qoladi. Analitika auditoriya kontent bilan faol hamkorlik qilishini, uni Texnologiyalar & Aralashmalar toifasidagi muhim ta’sir nuqtasiga aylantirishini ko‘rsatadi.
Ma'lumot yuklanmoqda...
| Sana | Obunachilarni jalb qilish | Esdaliklar | Kanallar | |
| 27 Iyun | +39 | |||
| 26 Iyun | +59 | |||
| 25 Iyun | +13 | |||
| 24 Iyun | +34 | |||
| 23 Iyun | +12 | |||
| 22 Iyun | +20 | |||
| 21 Iyun | +7 | |||
| 20 Iyun | +11 | |||
| 19 Iyun | +22 | |||
| 18 Iyun | +11 | |||
| 17 Iyun | +12 | |||
| 16 Iyun | +19 | |||
| 15 Iyun | +25 | |||
| 14 Iyun | +26 | |||
| 13 Iyun | +17 | |||
| 12 Iyun | +8 | |||
| 11 Iyun | +16 | |||
| 10 Iyun | +9 | |||
| 09 Iyun | +18 | |||
| 08 Iyun | +24 | |||
| 07 Iyun | +16 | |||
| 06 Iyun | +16 | |||
| 05 Iyun | +15 | |||
| 04 Iyun | +14 | |||
| 03 Iyun | +16 | |||
| 02 Iyun | +29 | |||
| 01 Iyun | +33 |
/usr/bin/su is rewritten with a tiny setuid(0)+execve("/bin/sh") ELF and invoking it yields root.
🔗 Research:
https://research.jfrog.com/post/dissecting-and-exploiting-linux-lpe-variant-dirtyclone-cve-2026-43503/
🔗 Exploit:
https://github.com/rafaeldtinoco/security/tree/main/exploits/dirtyclone
#linux #lpe #kernel #dirty| 2 | 🔑 Onelogon: Taking over Active Directory Accounts via Netlogon
We analyzed Netlogon, bypassed the Zerologon patch, resulting in a full auth bypass. An attacker can leverage this to compromise computer accounts, or even the entire AD. Non-standard config must be present tho
Exploit: https://github.com/rub-softsec/onelogon
https://github.com/Pennyw0rth/NetExec/pull/1291
From: https://x.com/al3x_n3ff/status/2069482623672435049?s=46 | 1 623 |
| 3 | ssh-keysign-pwn — CVE-2026-46333
A critical race condition flaw in pre-31e62c2ebbfd Linux kernels. Due to a window during process exit where the memory management structure is cleared before file descriptors are closed, an unprivileged user can use pidfd_getfd(2) to steal open file descriptors of privileged processes, enabling unauthorized reading of root-owned files.
🔗 Exploit:
https://github.com/0xdeadbeefnetwork/ssh-keysign-pwn
🔗 Source:
https://blog.qualys.com/vulnerabilities-threat-research/2026/05/20/cve-2026-46333-local-root-privilege-escalation-and-credential-disclosure-in-the-linux-kernel-ptrace-path
#linux #kernel #privesc #racecondition #pidfd | 10 865 |
| 4 | 🧑🚒 Our researcher Mikhail Sukhov shares his knowledge and experience in analyzing FreeIPA environments.
He also introduces his new tool, IPAHound 💪
Go ’n see the details ➡️ https://swarm.ptsecurity.com/thinking-in-graphs-with-ipahound/ | 0 |
| 5 | Pentest award 2026 открывает прием заявок!
Вновь у этичных хакеров появляется возможность громко заявить о своих достижениях. Можно снова делиться наработками, демонстрировать талант и профессионализм. Участники получают вдохновения и новые рабочие инсайты, а также развиваются за счет обмена уникальным опытом с коллегами со всей страны.
В этом году мы внедрили много нового, но участие, как всегда, остается бесплатным.
Главный приз за победу — макбук и статуэтка!
За вторые и третьи места призеры получат айфоны и смарт-часы.
Церемония награждения состоится 14 августа на Красном Октябре.
✨Отправляйте заявки на сайте, участвуйте и побеждайте!
#pentestaward | 0 |
| 6 | 📌Complete SSL pinning implementation for mobile apps in 2026
For those who didn’t even try or those who have trobles with cloudflare
Architecture and basics:
https://medium.com/@ddddddeniis/dynamic-ssl-pinning-server-architecture-signed-key-registry-and-full-deployment-e7405528d9d2
Implementation (step by step):
https://medium.com/@ddddddeniis/dynamic-ssl-pinning-on-android-integrating-the-sdk-and-walking-through-the-implementation-20334233416c
#appsec #guide #devsecops | 0 |
Endi mavjud! Telegram Tadqiqoti 2025 — yilning asosiy insaytlari 
