uz
Feedback

Firibgarlarga uchmang! Telemetrio bunday kanallarni topadi va belgilaydi 👉 Belgini ko‘rmoqchi bo‘lsangiz, obuna bo‘ling

APT

APT

Kanalga Telegram’da o‘tish

This channel discusses: — Offensive Security — RedTeam — Malware Research — OSINT — etc Disclaimer: t.me/APT_Notes/6 Chat Link: t.me/APT_Notes_PublicChat

Ko'proq ko'rsatish
Rossiya38 225Texnologiyalar & Aralashmalar7 555

📈 Telegram kanali APT analitikasi

APT (@apt_notes) Ingliz til segmentidagi kanali faol ishtirokchi. Hozirda hamjamiyat 17 201 obunachidan iborat bo'lib, Texnologiyalar & Aralashmalar toifasida 7 555-o'rinni va Rossiya mintaqasida 38 225-o'rinni egallagan.

📊 Auditoriya ko‘rsatkichlari va dinamika

невідомо sanasidan buyon loyiha tez o‘sib, 17 201 obunachiga ega bo‘ldi.

29 Oktabr, 2026 dagi oxirgi ma’lumotlarga ko‘ra kanal barqaror faollikka ega. Oxirgi 30 kunda obunachilar soni 483 ga, so‘nggi 24 soatda esa 23 ga o‘zgardi va umumiy qamrov yuqori darajada qolmoqda.

  • Tasdiqlash holati: Tasdiqlanmagan
  • Jalb etish (ER): Auditoriya o‘rtacha 44.31% darajada jalb etiladi. Nashrdan keyingi dastlabki 24 soatda kontent odatda umumiy obunachilar sonining N/A% ini tashkil etuvchi reaksiyalarni to‘playdi.
  • Post qamrovi: Har bir post o‘rtacha 0 marta ko‘riladi; birinchi sutkada odatda 0 ta ko‘rish yig‘iladi.
  • Reaksiyalar va o‘zaro ta’sir: Auditoriya faol: har bir postga o‘rtacha 0 ta reaksiya keladi.

📝 Tavsif va kontent siyosati

Muallif resursni shaxsiy fikrni ifoda etish maydoni sifatida ta’riflaydi:
“This channel discusses: — Offensive Security — RedTeam — Malware Research — OSINT — etc Disclaimer: t.me/APT_Notes/6 Chat Link: t.me/APT_Notes_PublicChat”

Yuqori yangilanish chastotasi (oxirgi ma’lumot 30 Oktabr, 2026 da olingan) sababli kanal doimo dolzarb va katta qamrovli bo‘lib qoladi. Analitika auditoriya kontent bilan faol hamkorlik qilishini, uni Texnologiyalar & Aralashmalar toifasidagi muhim ta’sir nuqtasiga aylantirishini ko‘rsatadi.

17 201
Obunachilar
+2324 soatlar
+1367 kun
+48330 kun
Postlar arxiv
APT
APT
17 206
💻 VMware vCenter Server — Remote Code Execution (CVE-2024-22274) The vCenter Server contains an authenticated remote code execution vulnerability. A malicious actor with administrative privileges on the vCenter appliance shell may exploit this issue to run arbitrary commands on the underlying operating system as the "root" user. 🔗 Source: https://github.com/mbadanoiu/CVE-2024-22275 #vmware #vcenter #rce #cve

APT
APT
17 206
💻 VMware vCenter Server — Multiple LPE (CVE-2024-37081) The vCenter Server contains multiple local privilege escalation vulnerabilities due to misconfiguration of sudo. An authenticated local user with non-administrative privileges may exploit these issues to elevate privileges to root on vCenter Server Appliance. 🔗 Source: https://github.com/mbadanoiu/CVE-2024-37081 #vmware #vcenter #lpe #cve

APT
APT
17 206
Repost from Похек
RockYou2024 Архив весит 45 гб Распакованный 156 гб Загрузил на свой S3. Скорость не лучшая, но точно не отвалиться загрузка https://s3.timeweb.cloud/fd51ce25-6f95e3f8-263a-4b13-92af-12bc265adb44/rockyou2024.zip В процессе Google Drive и Яндекс Диск

APT
APT
17 206
🔑 RockYou2024: 10 billion passwords leaked in the largest compilation of all time Researchers discovered what appears to be
🔑 RockYou2024: 10 billion passwords leaked in the largest compilation of all time Researchers discovered what appears to be the largest password compilation with a staggering 9,948,575,739 unique plaintext password 🔗 Source: https://cybernews.com/security/rockyou2024-largest-password-compilation-leak/ 🔗 Source archive: https://fastupload.io/1824d409732f30be #wordlist #rockyou #passwords

APT
APT
17 206
📄 Evading ETW Based Detections In this post, Event Tracing for Windows (ETW) will be explored along with various evasion techniques used to evade detections based on this Windows event tracking and collection mechanism. 🔗 https://s4dbrd.com/evading-etw-based-detections/ #etw #bypass #windows

APT
APT
17 206
🤖 DojoLoader — Generic PE Loader for Prototyping Evasion Techniques This is a versatile PE loader designed for prototyping evasion techniques. It supports downloading and executing encrypted shellcode, dynamic IAT hooking, and three Sleep obfuscation methods. Ideal for use with UDRL-less Beacon payloads from Cobalt Strike. 🔗 Blog Post: https://www.naksyn.com/cobalt%20strike/2024/07/02/raising-beacons-without-UDRLs-teaching-how-to-sleep.html 🔗 Source: https://github.com/naksyn/DojoLoader #cobaltstrike #udrl #memory #evasion

APT
APT
17 206
🖼️ RegreSSHion — OpenSSH Unauthenticated RCE The Qualys Threat Research Unit has discovered a Remote Unauthenticated Code Ex
🖼️ RegreSSHion — OpenSSH Unauthenticated RCE The Qualys Threat Research Unit has discovered a Remote Unauthenticated Code Execution vulnerability in OpenSSH’s server (sshd) in glibc-based Linux systems. CVE assigned to this vulnerability is CVE-2024-6387. The vulnerability, which is a signal handler race condition in OpenSSH’s server (sshd), allows unauthenticated remote code execution (RCE) as root on glibc-based Linux systems. 🔗 Research: https://blog.qualys.com/vulnerabilities-threat-research/2024/07/01/regresshion-remote-unauthenticated-code-execution-vulnerability-in-openssh-server 🔗 PoC: https://github.com/7etsuo/cve-2024-6387-poc #openssh #glibc #rce #cve

APT
APT
17 206
🪞 Smoke and Mirrors — Driver Signatures Are Optional ItsNotASecurityBoundary is an exploit that leverages False File Immutab
🪞 Smoke and Mirrors — Driver Signatures Are Optional ItsNotASecurityBoundary is an exploit that leverages False File Immutability assumptions in Windows Code Integrity (ci.dll) to trick it into accepting an improperly-signed security catalog containing fraudulent authentihashes. With attacker-controlled authentihashes loaded and trusted by CI, the kernel will load any driver of the attacker's choosing, even unsigned ones. 🔗 https://github.com/gabriellandau/ItsNotASecurityBoundary #driver #signature #bypass #ffi #windows

APT
APT
17 206
Repost from PT SWARM
🔥 Our researcher Arseniy Sharoglazov has discovered two unauthenticated RCE vulnerabilities in Xerox WorkCentre! Read more: https://swarm.ptsecurity.com/inside-xerox-workcentre-two-unauthenticated-rces/

APT
APT
17 206
Repost from Ralf Hacker Channel
CVE-2024-30088: Windows LPE PATCHED: June 11, 2024 https://github.com/tykawaii98/CVE-2024-30088 P.S. Протестил на Win11, рабо
CVE-2024-30088: Windows LPE PATCHED: June 11, 2024 https://github.com/tykawaii98/CVE-2024-30088 P.S. Протестил на Win11, работает #git #exploit #lpe #pentest #redteam

APT
APT
17 206
💻 TREVORproxy This is a simple SOCKS proxy that helps avoid Smart Lockout by load-balancing your requests between multiple IP addresses. It accomplishes this with built-in Linux features -- no complex OpenVPN setups or strange firewall configurations. There are two techniques that TREVORproxy can use to spread your requests across multiple IP addresses: an SSH Proxy and a Subnet Proxy. — SSH Proxy You give TREVORproxy some hosts that support SSH, and it sends your traffic through them, making sure to balance equally between all the hosts. — Subnet Proxy If you have access to a /64 IPv6 subnet (Linode is perfect for this), TREVORproxy will load-balance your requests across eighteen quintillion (18,446,744,073,709,551,616) unique source addresses. 🔗 Source: https://github.com/blacklanternsecurity/TREVORproxy #ip #rotation #waf #bypass

APT
APT
17 206
Repost from RedTeam brazzers
Всем доброго вторника! Помните, друзья, как круто было, когда вышел KrbRelay , a за ним KrbrelayUp? Казалось, что в тот день эксплуатация AD перевернулась с ног на голову. Или с головы на ноги.... :)) Не суть!) Недавно я выкладывал статью, в которой постарался максимально просто описать процесс ретрансляции керберос аутентификации. Но ещё раньше появились интересные атаки: CertifiedDCOM и SilverPotato . Была лишь одна проблема - нет POCов. А что делают студенты, когда нет POCов? Правильно! Их пишут :)) Поэтому хочу вам с радостью представить тулзу RemoteKrbRelay, которая не просто совмещает в себе и SilverPotato и CertifiedDCOM, а является полноценным фреймворком для обнаружения уязвимых DCOM-обьектов! Я добавил чекер, который выводит абсолютно всю информацию о DCOM-объектах системы в удобно читаемом виде (csv / xlsx). Помимо этого, присутствует встроенный функционал кросс-сессионной активации. Представляете? Есть два компьютера. На одном вы, а на втором ДА. И вы можете со своего компьютера триггерить керберос аутентификацию ДА, абсолютно удаленно!) 🙂 Что ж, отмечу, что это лишь minimal POC и ему ещё есть куда расти :) Например, я пока не допилил функционал по релею керберос аутентификации из OXID Initial Resolution Request (а там вообще-то RPC_C_IMP_LEVEL_IMPERSONATE🤫). Впрочем, я готов принимать PR :))

APT
APT
17 206
Repost from Offensive Xwitter
😈 [ Daniel @0x64616e ] Did you know curl on Windows can authenticate via SSPI? Proxy auth works as well. 🐥 [ tweet ]
😈 [ Daniel @0x64616e ] Did you know curl on Windows can authenticate via SSPI? Proxy auth works as well. 🐥 [ tweet ]

APT
APT
17 206
👩‍💻Apache Kafka UI RCE (CVE-2023-52251, CVE-2024-32030) Kafka UI is affected by two remote code execution vulnerabilities.
👩‍💻Apache Kafka UI RCE (CVE-2023-52251, CVE-2024-32030) Kafka UI is affected by two remote code execution vulnerabilities. The first vulnerability in the message filtering component leads to execution of arbitrary unsandboxed groovy script. The second vulnerability can be exploited by abusing Kafka UI to connect to a malicious JMX server, which leads to RCE via unsafe deserialization. This is particularly dangerous, as Kafka UI does not have authentication enabled by default. 🔗 Source: https://securitylab.github.com/advisories/GHSL-2023-229_GHSL-2023-230_kafka-ui/ #apache #kafka #ui #rce

APT
APT
17 206
Repost from Offensive Xwitter
😈 [ X-C3LL @TheXC3LL ] You can find my slides for "Offensive VBA" talk here 🔗 https://github.com/X-C3LL/congresos-slides/bl
😈 [ X-C3LL @TheXC3LL ] You can find my slides for "Offensive VBA" talk here 🔗 https://github.com/X-C3LL/congresos-slides/blob/master/Offensive%20VBA.pdf 🐥 [ tweet ]

APT
APT
17 206
Repost from 1N73LL1G3NC3
LogHunter Opsec tool for finding user sessions by analyzing event log files through RPC (MS-EVEN) Youtube POC
LogHunter Opsec tool for finding user sessions by analyzing event log files through RPC (MS-EVEN) Youtube POC

APT
APT
17 206
🔥 VMware vCenter Server RCE + PrivEsc Multiple heap-overflow vulnerabilities in the implementation of the DCE/RPC protocol.
🔥 VMware vCenter Server RCE + PrivEsc Multiple heap-overflow vulnerabilities in the implementation of the DCE/RPC protocol. They could allow a bad actor with network access to vCenter Server to achieve remote code execution by sending a specially crafted network packet. — CVE-2024-37079: A heap-overflow vulnerability in the DCERPC protocol implementation of vCenter Server that allows a malicious actor with network access to send specially crafted packets, potentially leading to remote code execution. (CVSS v3.1 score: 9.8 "critical"); — CVE-2024-37080: Another heap overflow vulnerability in the DCERPC protocol of vCenter Server. Similar to CVE-2024-37079, it allows an attacker with network access to exploit heap overflow by sending crafted packets, potentially resulting in remote code execution. (CVSS v3.1 score: 9.8 "critical"); — CVE-2024-37081: This vulnerability arises from a misconfiguration of sudo in vCenter Server, permitting an authenticated local user to exploit this flaw to elevate their privileges to root on the vCenter Server Appliance. (CVSS v3.1 score: 7.8 "high"). Nuclei Template (PoC): 🔗 https://gist.github.com/tothi/0ff034b254aca527c3a1283ff854592a Nmap Script (PoC): 🔗 https://github.com/nmap/nmap/blob/4b28defac6e3eb8b8eb4704f506949806d784f73/scripts/vmware-version.nse Shodan 
product:"VMware vCenter Server"
FOFA 
app="vmware-vCenter"
#vmware #vcenter #rce #lpe #cve

APT
APT
17 206
Repost from Just Security
Дедлайн близко 😱 Продолжаем поиск самых выдающихся работ, относящихся к разным стадиям имитации хакерских атак. Браво, всем,
Дедлайн близко 😱 Продолжаем поиск самых выдающихся работ, относящихся к разным стадиям имитации хакерских атак. Браво, всем, кто уже прислал заявки: форма и содержание, креативная подача, мемные иллюстрации и точные метафоры — все это божественно прекрасно. Не зря мы твердим, что пентест самая творческая ИБ-профессия. Гордимся всеми участниками за ум, инициативность и смелость!  Не упускайте шанс побороться за звание лучшего этичного хакера, получить призы и потусить с единомышленниками в камерной атмосфере на церемонии награждения.  Делитесь своими наработками — https://award.awillix.ru/  #pentestaward

APT
APT
17 206
🌀Voidgate A technique that can be used to bypass AV/EDR memory scanners. This can be used to hide well-known and detected shellcodes (such as msfvenom) by performing on-the-fly decryption of individual encrypted assembly instructions, thus rendering memory scanners useless for that specific memory page. 🔗 Source https://github.com/vxCrypt0r/Voidgate?tab=readme-ov-file #av #edr #evasion #hwbp #cpp

APT
APT
17 206