uz
Feedback
APT

APT

Kanalga Telegram’da o‘tish

This channel discusses: — Offensive Security — RedTeam — Malware Research — OSINT — etc Disclaimer: t.me/APT_Notes/6 Chat Link: t.me/APT_Notes_PublicChat

Ko'proq ko'rsatish
Rossiya40 429Texnologiyalar & Aralashmalar7 782

📈 Telegram kanali APT analitikasi

APT (@apt_notes) Ingliz til segmentidagi kanali faol ishtirokchi. Hozirda hamjamiyat 16 238 obunachidan iborat bo'lib, Texnologiyalar & Aralashmalar toifasida 7 782-o'rinni va Rossiya mintaqasida 40 429-o'rinni egallagan.

📊 Auditoriya ko‘rsatkichlari va dinamika

невідомо sanasidan buyon loyiha tez o‘sib, 16 238 obunachiga ega bo‘ldi.

29 Avgust, 2026 dagi oxirgi ma’lumotlarga ko‘ra kanal barqaror faollikka ega. Oxirgi 30 kunda obunachilar soni 560 ga, so‘nggi 24 soatda esa 13 ga o‘zgardi va umumiy qamrov yuqori darajada qolmoqda.

  • Tasdiqlash holati: Tasdiqlanmagan
  • Jalb etish (ER): Auditoriya o‘rtacha 39.15% darajada jalb etiladi. Nashrdan keyingi dastlabki 24 soatda kontent odatda umumiy obunachilar sonining 18.08% ini tashkil etuvchi reaksiyalarni to‘playdi.
  • Post qamrovi: Har bir post o‘rtacha 6 354 marta ko‘riladi; birinchi sutkada odatda 2 934 ta ko‘rish yig‘iladi.
  • Reaksiyalar va o‘zaro ta’sir: Auditoriya faol: har bir postga o‘rtacha 26 ta reaksiya keladi.

📝 Tavsif va kontent siyosati

Muallif resursni shaxsiy fikrni ifoda etish maydoni sifatida ta’riflaydi:
“This channel discusses: — Offensive Security — RedTeam — Malware Research — OSINT — etc Disclaimer: t.me/APT_Notes/6 Chat Link: t.me/APT_Notes_PublicChat”

Yuqori yangilanish chastotasi (oxirgi ma’lumot 30 Avgust, 2026 da olingan) sababli kanal doimo dolzarb va katta qamrovli bo‘lib qoladi. Analitika auditoriya kontent bilan faol hamkorlik qilishini, uni Texnologiyalar & Aralashmalar toifasidagi muhim ta’sir nuqtasiga aylantirishini ko‘rsatadi.

16 238
Obunachilar
+1324 soatlar
+1017 kunlar
+56030 kunlar
Postlar arxiv
APT
APT
16 239
💥 Fortinet FortiNAC Unauthenticated RCE On Thursday, 16 February 2022, Fortinet released a PSIRT that details CVE-2022-39952
💥 Fortinet FortiNAC Unauthenticated RCE On Thursday, 16 February 2022, Fortinet released a PSIRT that details CVE-2022-39952, a critical vulnerability affecting its FortiNAC product. This vulnerability, discovered by Gwendal Guégniaud of Fortinet, allows an unauthenticated attacker to write arbitrary files on the system and as a result obtain remote code execution in the context of the root user. PoC: https://github.com/horizon3ai/CVE-2022-39952 Research: https://www.horizon3.ai/fortinet-fortinac-cve-2022-39952-deep-dive-and-iocs/ #fortinet #fortinac #rce #cve

APT
APT
16 239
🧪 NtQueueApcThreadEx — NTDLL Gadget Injection This novel way of using NtQueueApcThreadEx by abusing the ApcRoutine and Syste
🧪 NtQueueApcThreadEx — NTDLL Gadget Injection This novel way of using NtQueueApcThreadEx by abusing the ApcRoutine and SystemArgument[0-3] parameters by passing a random pop r32; ret gadget can be used for stealthy code injection. Source: https://github.com/LloydLabs/ntqueueapcthreadex-ntdll-gadget-injection #apc #ntdll #injection #clang #redteam

APT
APT
16 239
🔥 NimPlant С2 This is a new light-weight, first-stage C2 implant written in Nim, with a supporting Python server and Next.JS
🔥 NimPlant С2 This is a new light-weight, first-stage C2 implant written in Nim, with a supporting Python server and Next.JS web GUI. https://github.com/chvancooten/NimPlant #c2 #nim #python #redteam

APT
APT
16 239
Joomla Web Service Endpoint Access (CVE-2023-23752) An issue was discovered in Joomla! 4.0.0 through 4.2.7. An improper acces
Joomla Web Service Endpoint Access (CVE-2023-23752) An issue was discovered in Joomla! 4.0.0 through 4.2.7. An improper access check allows unauthorized access to webservice endpoints. PoC: 
httpx -l targets.txt -sc -ct -ip -path '/api/index.php/v1/config/application?public=true'
Research: https://unsafe.sh/go-149780.html Nuclei Template: https://github.com/thecyberneh/nuclei-templatess/blob/main/cves/2023/CVE-2023-23752.yaml #joomla #endpoint #access #cve

APT
APT
16 239
🔧 Windows LPE via StorSvc Service StorSvc is a service which runs as NT AUTHORITY\SYSTEM and tries to load the missing SprintCSP.dll DLL when triggering the SvcRebootToFlashingMode RPC method locally. PoC: https://github.com/blackarrowsec/redteam-research/tree/master/LPE%20via%20StorSvc #windows #lpe #storsvc #service

APT
APT
16 239
Repost from Ralf Hacker Channel
И ещё одна новая картошка! RasMan service for privilege escalation https://github.com/crisprss/RasmanPotato #git #lpe #soft #pentest #redteam

APT
APT
16 239
Repost from Offensive Xwitter
Псс, гайс, слышали об уязвимости CVE-2022-48109? Вот и я нет до сегодняшнего дня, а ведь это CVE ID моего инфосек-братишки @Acrono! Хочу первым поздравить Пашу с потерей цвйешной девственности – ура-ура! Ждем от него покорения новых вершин на поприще киберсесурити 💪🏻 Следите за каналом @APT_Notes, чтобы узнать подробности 😉

APT
APT
16 239
Repost from 1N73LL1G3NC3
certsync certsync is a new technique in order to dump NTDS remotely, but this time without DRSUAPI: it uses golden certificat
certsync certsync is a new technique in order to dump NTDS remotely, but this time without DRSUAPI: it uses golden certificate and UnPAC the hash. It works in several steps: 1) Dump user list, CA informations and CRL from LDAP 2) Dump CA certificate and private key 3) Forge offline a certificate for every user 4) UnPAC the hash for every user in order to get nt and lm hashes

APT
APT
16 239
⭐️ Privileger Privilger allows you to work with privileges in Windows as easily as possible. There are three modes: — Add pri
⭐️ Privileger Privilger allows you to work with privileges in Windows as easily as possible. There are three modes: — Add privileges to an account; — Start a process by adding a specific privilege to its token; — Remove privilege from the user. Thanks to: @Michaelzhm https://github.com/MzHmO/Privileger #ad #windows #privilege #lsa

APT
APT
16 239
Repost from Offensive Xwitter
😈 [ 0x0SojalSec, Md Ismail Šojal ] The shortest payload for a tiny php reverse shell written in 19 bytes using only non-alp
😈 [ 0x0SojalSec, Md Ismail Šojal ] The shortest payload for a tiny php reverse shell written in 19 bytes using only non-alphanumeric characters. Hex values inside ⛶ indicate raw bytes. This will help to bypass WAF and execute PHP reverse shell for RCE. get more detail about this👇 🔗 https://gist.github.com/0xSojalSec/5bee09c7035985ddc13fddb16f191075 #bugbountyTips #bugbounty 🐥 [ tweet ]

APT
APT
16 239
⚙️ Meterpreter BOFLoader In this guide, you'll learn how the new BOFLoader extension allows BOFs to be used from a Meterprete
⚙️ Meterpreter BOFLoader In this guide, you'll learn how the new BOFLoader extension allows BOFs to be used from a Meterpreter session. Discover new attacks made possible in Meterpreter and avoid common errors. https://www.trustedsec.com/blog/operators-guide-to-the-meterpreter-bofloader #msf #meterpreter #bof #loader

APT
APT
16 239
Repost from 1N73LL1G3NC3
Inline-Execute-PE Is a CobaltStrike toolkit enabling users to load and repeatedly run unmanaged Windows exe’s in Beacon memor
Inline-Execute-PE Is a CobaltStrike toolkit enabling users to load and repeatedly run unmanaged Windows exe’s in Beacon memory without dropping to disk or creating a new process each time.

APT
APT
16 239
😈 Microsoft Exchange: OWASSRF + TabShell (CVE-2022-41076) The TabShell vulnerability its a form of Privilege Escalation which allows breaking out of the restricted Powershell Sandbox after you have successfully gained access through OWASSRF. For a detailed write see research: https://blog.viettelcybersecurity.com/tabshell-owassrf/ PoC: https://gist.github.com/testanull/518871a2e2057caa2bc9c6ae6634103e #owa #ssrf #tabshell #poc

APT
APT
16 239
✨ Happy New Year! Happy holiday to you, dear friends and subscribers of my channel! This year has brought a lot of trouble an
✨ Happy New Year! Happy holiday to you, dear friends and subscribers of my channel! This year has brought a lot of trouble and a lot of joyful moments. In the new year, I wish you more vulnerabilities found, interesting research and all the best. Thank you for all the support, feedback, and messages this year! Love you all ♥️

APT
APT
16 239
Repost from Offensive Xwitter
👹 [ snovvcrash, sn🥶vvcr💥sh ] Rewritten #DirtyVanity PoC injector to C# and #DInvoke. Great stuff @eliran_nissan! https://t
👹 [ snovvcrash, sn🥶vvcr💥sh ] Rewritten #DirtyVanity PoC injector to C# and #DInvoke. Great stuff @eliran_nissan! https://t.co/ifQLPMSFpb Happy upcoming New Year to everyone! 🎄 🔗 https://gist.github.com/snovvcrash/09deab831d49028e194e8ee83f2616a9 🐥 [ tweet ][ quote ]

APT
APT
16 239
🔑 Pass-the-Challenge This blog post introduces new techniques for recovering the NTLM hash from an encrypted credential prot
🔑 Pass-the-Challenge This blog post introduces new techniques for recovering the NTLM hash from an encrypted credential protected by Windows Defender Credential Guard. While previous techniques for bypassing Credential Guard focus on attackers targeting new victims who log into a compromised server, these new techniques can also be applied to victims logged on before the server was compromised. Research: https://research.ifcr.dk/pass-the-challenge-defeating-windows-defender-credential-guard-31a892eee22 Source: https://github.com/ly4k/PassTheChallenge #ad #windows #ntlm #challenge

APT
APT
16 239
Happy Christmas to everyone!
Happy Christmas to everyone!

APT
APT
16 239
🎲 PowerShell Obfuscation A simple and effective powershell obfuscaiton tool bypass Anti-Virus and AMSI-bypass + ETW-block. h
🎲 PowerShell Obfuscation A simple and effective powershell obfuscaiton tool bypass Anti-Virus and AMSI-bypass + ETW-block. https://github.com/H4de5-7/powershell-obfuscation #powershell #obfuscation #amsi #etw #bypass

APT
APT
16 239
👾 Windows Drivers Reverse Engineering Methodology This blog post details a methodology for reverse engineering and finding v
👾 Windows Drivers Reverse Engineering Methodology This blog post details a methodology for reverse engineering and finding vulnerable code paths in Windows drivers. Including a guide for setting up a lab for (the pesky) kernel debugging. https://voidsec.com/windows-drivers-reverse-engineering-methodology/ #reverse #driver #analysis

APT
APT
16 239
💥 Shellcode Mutator New tool to help red teamers avoid detection. Shellcode is a small piece of code that is typically used
💥 Shellcode Mutator New tool to help red teamers avoid detection. Shellcode is a small piece of code that is typically used as the payload in an exploit, and can often be detected by its “signature”, or unique pattern. Shellcode Mutator mutates exploit source code without affecting its functionality, changing its signature and making it harder to reliably detect as malicious. Research: https://labs.nettitude.com/blog/shellcode-source-mutations/ Source: https://github.com/nettitude/ShellcodeMutator #shellcode #mutator #nasm #redteam