uz
Feedback
APT

APT

Kanalga Telegram’da o‘tish

This channel discusses: — Offensive Security — RedTeam — Malware Research — OSINT — etc Disclaimer: t.me/APT_Notes/6 Chat Link: t.me/APT_Notes_PublicChat

Ko'proq ko'rsatish
Rossiya40 343Texnologiyalar & Aralashmalar7 759

📈 Telegram kanali APT analitikasi

APT (@apt_notes) Ingliz til segmentidagi kanali faol ishtirokchi. Hozirda hamjamiyat 16 259 obunachidan iborat bo'lib, Texnologiyalar & Aralashmalar toifasida 7 759-o'rinni va Rossiya mintaqasida 40 343-o'rinni egallagan.

📊 Auditoriya ko‘rsatkichlari va dinamika

невідомо sanasidan buyon loyiha tez o‘sib, 16 259 obunachiga ega bo‘ldi.

31 Avgust, 2026 dagi oxirgi ma’lumotlarga ko‘ra kanal barqaror faollikka ega. Oxirgi 30 kunda obunachilar soni 546 ga, so‘nggi 24 soatda esa 11 ga o‘zgardi va umumiy qamrov yuqori darajada qolmoqda.

  • Tasdiqlash holati: Tasdiqlanmagan
  • Jalb etish (ER): Auditoriya o‘rtacha 40.49% darajada jalb etiladi. Nashrdan keyingi dastlabki 24 soatda kontent odatda umumiy obunachilar sonining 18.06% ini tashkil etuvchi reaksiyalarni to‘playdi.
  • Post qamrovi: Har bir post o‘rtacha 6 579 marta ko‘riladi; birinchi sutkada odatda 2 934 ta ko‘rish yig‘iladi.
  • Reaksiyalar va o‘zaro ta’sir: Auditoriya faol: har bir postga o‘rtacha 26 ta reaksiya keladi.

📝 Tavsif va kontent siyosati

Muallif resursni shaxsiy fikrni ifoda etish maydoni sifatida ta’riflaydi:
“This channel discusses: — Offensive Security — RedTeam — Malware Research — OSINT — etc Disclaimer: t.me/APT_Notes/6 Chat Link: t.me/APT_Notes_PublicChat”

Yuqori yangilanish chastotasi (oxirgi ma’lumot 01 Sentabr, 2026 da olingan) sababli kanal doimo dolzarb va katta qamrovli bo‘lib qoladi. Analitika auditoriya kontent bilan faol hamkorlik qilishini, uni Texnologiyalar & Aralashmalar toifasidagi muhim ta’sir nuqtasiga aylantirishini ko‘rsatadi.

16 259
Obunachilar
+1124 soatlar
+927 kunlar
+54630 kunlar
Postlar arxiv
APT
APT
16 266
RefleXXion RefleXXion is a utility designed to aid in bypassing user-mode hooks utilised by AV/EPP/EDR etc. In order to bypas
RefleXXion RefleXXion is a utility designed to aid in bypassing user-mode hooks utilised by AV/EPP/EDR etc. In order to bypass the user-mode hooks, it first collects the syscall numbers of the NtOpenFile, NtCreateSection, NtOpenSection and NtMapViewOfSection found in the LdrpThunkSignature array. https://github.com/hlldz/RefleXXion #edr #evasion #cpp #redteam

APT
APT
16 266
Create a Hidden Account in Windows A tool for creating hidden accounts using the registry. In addition to adding hidden accou
Create a Hidden Account in Windows A tool for creating hidden accounts using the registry. In addition to adding hidden accounts, the tool also adds functions to check hidden accounts and delete hidden accounts, so that both the red team and the blue team can use this tool. https://github.com/wgpsec/CreateHiddenAccount #ad #windows #hidden #account

APT
APT
16 266
CRLF OneLiner A simple Bash one liner with aim to automate CRLF vulnerability scanning. This is an extremely helpful and practical One liner for Bug Hunters, which helps you find CRLF missconfiguration in every possible method. Simply replace the links in subdomains.txt with the URL you want to target. This will help you scan for CRLF vulnerability without the need of an external tool. What you have to do is to copy-and-paste the commands into your terminal and finger crossed for any possible CRLF. Bash OneLiner: input='CRLF-one-liner/subdomains.txt';while IFS= read -r targets; do cat CRLF-one-liner/crlf_payloads.txt |xargs -I % sh -c "curl -vs --max-time 9 $targets/% 2>&1 |grep -q '< Set-Cookie: ?crlf'&& echo $targets '[+] is vulnerable with payload: '%>>crlf_results.txt||echo '[-] Not vulnerable: '$targets";done<$input crlf_payloads.txt: https://raw.githubusercontent.com/kleiton0x00/CRLF-one-liner/master/crlf_payloads.txt #crlf #bash #oneliner #bugbounty

APT
APT
16 266
Log4j — WAF and Patches Bypass Tricks https://github.com/Puliczek/CVE-2021-44228-PoC-log4j-bypass-words #log4j #waf #bypass #bugbounty

APT
APT
16 266
Anti-Spam Bypass A script that helps you understand why your E-Mail ended up in Spam https://github.com/mgeeky/decode-spam-he
Anti-Spam Bypass A script that helps you understand why your E-Mail ended up in Spam https://github.com/mgeeky/decode-spam-headers #phishing #anispam #bypass

APT
APT
16 266
Custom Previews For Malicious Attachments A phishing technique that allows attackers to create fake previews for their malici
Custom Previews For Malicious Attachments A phishing technique that allows attackers to create fake previews for their malicious attachment with Google Mail. https://mrd0x.com/phishing-google-users-by-spoofing-previews/ #phishing #gmail #attachments

APT
APT
16 266
Finding Sensitive Files for BugBounty — /proc/self/cwd/index.php — /proc/self/cwd/main.py — /etc/motd — /proc/net/udp — /proc/net/arp — /proc/self/environ — /var/run/secrets/kubernetes.io/serviceaccount — /proc/cmdline — /proc/mounts — /etc/motd — /etc/mysql/my.cnf — /proc/sched_debug — /home/ user/.bash_history — /home/user/.ssh/id_rsa #sensitive #files #bugbounty #bugbountytips

APT
APT
16 266
aesKrbKeyGen Script to calculate Active Directory Kerberos keys (AES256 and AES128) for an account, using its plaintext password. Either of the resulting keys can be utilized with Impacket's getTGT.py to obtain a TGT for the account, provided it is configured to support AES encryption. https://github.com/Tw1sm/AesKrbKeyGen #ad #kerbeos #tgt #tools

APT
APT
16 266
Process Ghosting This article describes a new executable image tampering attack similar to, but distinct from, Doppelgänging
Process Ghosting This article describes a new executable image tampering attack similar to, but distinct from, Doppelgänging and Herpaderping. With this technique, an attacker can write a piece of malware to disk in such a way that it’s difficult to scan or delete it — and where it then executes the deleted malware as though it were a regular file on disk. This technique does not involve code injection, process hollowing, or Transactional NTFS (TxF). Research: https://www.elastic.co/blog/process-ghosting-a-new-executable-image-tampering-attack C# Code Snippet: https://github.com/Wra7h/SharpGhosting #edr #evasion #process #ghosting #csharp

APT
APT
16 266
Adding DCSync Permissions from Linux https://www.n00py.io/2022/01/adding-dcsync-permissions-from-linux/ #ad #dcsync #linux

APT
APT
16 266
LDAP Relay Scan A tool to check Domain Controllers for LDAP server protections regarding the relay of NTLM authentication. https://github.com/zyn3rgy/LdapRelayScan #ad #ldap #scan #tools

APT
APT
16 266
DevSecOps pipelines — Secrets scan — Code scan — Dependency check (code libraries + image packages) — DAST — Exposures check
DevSecOps pipelines — Secrets scan — Code scan — Dependency check (code libraries + image packages) — DAST — Exposures check Pipelines: https://gitlab.com/whitespots-public/pipelines Security scanners: https://gitlab.com/whitespots-public/security-images Example project integration: https://gitlab.com/whitespots-public/vulnerable-python-app #appsec #devsecops #pipelines

APT
APT
16 266
Active Directory Checklist — Attack & Defense Cheatsheet https://cybersecuritynews.com/active-directory-checklist/ #ad #cheatsheet #redteam #blueteam

APT
APT
16 266
Evading WinDefender ATP Credential Theft https://b4rtik.github.io/posts/evading-windefender-atp-credential-theft-kernel-versi
Evading WinDefender ATP Credential Theft https://b4rtik.github.io/posts/evading-windefender-atp-credential-theft-kernel-version/ #windows #native #api #kernel #cpp

APT
APT
16 266
Malware Analysis: Syscalls Great guide and overview about Syscalls and how to start diagnosing them. https://jmpesp.me/malwar
Malware Analysis: Syscalls Great guide and overview about Syscalls and how to start diagnosing them. https://jmpesp.me/malware-analysis-syscalls-example/ #maldev #cpp #syscall

APT
APT
16 266
Vergilius A collection of Microsoft Windows kernel structures, unions and enumerations. Most of them are not officially docum
Vergilius A collection of Microsoft Windows kernel structures, unions and enumerations. Most of them are not officially documented and cannot be found in Windows Driver Kit (WDK) headers. The target audience of this site is driver developers and kernel researches https://www.vergiliusproject.com/ #windows #driver #kernel

APT
APT
16 266
Ares This project is a PoC loader written in C/C++ based on the Transacted Hollowing technique. It features: — PPID spoofing — Dynamic function resolution with API hashing — NTDLL unhooking — AES256 CBC Encryption — CIG to block non-Microsoft-signed binaries https://github.com/Cerbersec/Ares #edr #evasion #cpp

APT
APT
16 266
LdrLoadDll-Unhooking https://github.com/trickster0/LdrLoadDll-Unhooking #edr #evasion #dll #cpp

APT
APT
16 266
Network Access Control (NAC) Bypass This post will be all about Network Access Control (NAC) solutions and how they might lull you into a sense of security. https://luemmelsec.github.io/I-got-99-problems-but-my-NAC-aint-one/ #nac #bypass #pentest

APT
APT
16 266
Active Directory ACL Visualizer and Explorer adalanche tool gives instant results, showing you what permissions users and gro
Active Directory ACL Visualizer and Explorer adalanche tool gives instant results, showing you what permissions users and groups have in an Active Directory. It is useful for visualizing and exploring who can take over accounts, machines or the entire domain, and can be used to find and show misconfigurations. https://github.com/lkarlslund/adalanche #ad #acl #visualizer #blueteam #redteam