uz
Feedback
APT

APT

Kanalga Telegram’da o‘tish

This channel discusses: — Offensive Security — RedTeam — Malware Research — OSINT — etc Disclaimer: t.me/APT_Notes/6 Chat Link: t.me/APT_Notes_PublicChat

Ko'proq ko'rsatish
Rossiya40 535Texnologiyalar & Aralashmalar7 794

📈 Telegram kanali APT analitikasi

APT (@apt_notes) Ingliz til segmentidagi kanali faol ishtirokchi. Hozirda hamjamiyat 16 275 obunachidan iborat bo'lib, Texnologiyalar & Aralashmalar toifasida 7 794-o'rinni va Rossiya mintaqasida 40 535-o'rinni egallagan.

📊 Auditoriya ko‘rsatkichlari va dinamika

невідомо sanasidan buyon loyiha tez o‘sib, 16 275 obunachiga ega bo‘ldi.

01 Sentabr, 2026 dagi oxirgi ma’lumotlarga ko‘ra kanal barqaror faollikka ega. Oxirgi 30 kunda obunachilar soni 547 ga, so‘nggi 24 soatda esa 18 ga o‘zgardi va umumiy qamrov yuqori darajada qolmoqda.

  • Tasdiqlash holati: Tasdiqlanmagan
  • Jalb etish (ER): Auditoriya o‘rtacha 44.29% darajada jalb etiladi. Nashrdan keyingi dastlabki 24 soatda kontent odatda umumiy obunachilar sonining 18.04% ini tashkil etuvchi reaksiyalarni to‘playdi.
  • Post qamrovi: Har bir post o‘rtacha 7 204 marta ko‘riladi; birinchi sutkada odatda 2 934 ta ko‘rish yig‘iladi.
  • Reaksiyalar va o‘zaro ta’sir: Auditoriya faol: har bir postga o‘rtacha 26 ta reaksiya keladi.

📝 Tavsif va kontent siyosati

Muallif resursni shaxsiy fikrni ifoda etish maydoni sifatida ta’riflaydi:
“This channel discusses: — Offensive Security — RedTeam — Malware Research — OSINT — etc Disclaimer: t.me/APT_Notes/6 Chat Link: t.me/APT_Notes_PublicChat”

Yuqori yangilanish chastotasi (oxirgi ma’lumot 02 Sentabr, 2026 da olingan) sababli kanal doimo dolzarb va katta qamrovli bo‘lib qoladi. Analitika auditoriya kontent bilan faol hamkorlik qilishini, uni Texnologiyalar & Aralashmalar toifasidagi muhim ta’sir nuqtasiga aylantirishini ko‘rsatadi.

16 275
Obunachilar
+1824 soatlar
+827 kun
+54730 kun
Postlar arxiv
APT
APT
16 272

APT
APT
16 272
Mindmap on RDP analysis #mindmap #forensic #rdp

APT
APT
16 272
How to exploit CVE-2021-40539 on ManageEngine ADSelfService Plus 👤 by Antoine Cervoise, Wilfried Bécard ADSS offers multiple functionalities such as managing password policies for administrators or self password reset/account unlock for Active Directory users. In this article research team explore the details of several vulnerabilities that allow an unauthenticated attacker to execute arbitrary code on the server. 📝 Contents: • First steps • Authentication Bypass • Arbitrary file upload through the API • Arguments injection • Chaining everything together to get code execution • Conclusion https://www.synacktiv.com/publications/how-to-exploit-cve-2021-40539-on-manageengine-adselfservice-plus.html

APT
APT
16 272
ScoutSuite Scout Suite is an open source multi-cloud security-auditing tool, which enables security posture assessment of cloud environments. Using the APIs exposed by cloud providers, Scout Suite gathers configuration data for manual inspection and highlights risk areas. Rather than going through dozens of pages on the web consoles, Scout Suite presents a clear view of the attack surface automatically. # https://github.com/nccgroup/ScoutSuite # https://github.com/nccgroup/sadcloud #aws #azure #gcp #auditing #tool

APT
APT
16 272
LOLBAS Cmdl32.exe It's like a new certutil.exe but absolutely unheard of by any antivirus software! "C:\Windows\System32\Cmdl32.exe" (signed by MS) is for you. #lolbin #lolbas

APT
APT
16 272
Django Debug Mode Bypass https://target/login?next=/ https://target/admin [301 to https://target/admin/login/?next=/admin/] C
Django Debug Mode Bypass 
https://target/login?next=/

https://target/admin
[301 to https://target/admin/login/?next=/admin/]

Change request to [POST]
[500 Django DEBUG mode and vary bad information]
#bugbounty #bugbountytips #bugbountytip

APT
APT
16 272
GitLab RCE — CVE-2021-22205 https://github.com/Al1ex/CVE-2021-22205 #gitlab #rce

APT
APT
16 272
From Zero to Domain Admin https://thedfirreport.com/2021/11/01/from-zero-to-domain-admin/ #blueteam #writeup

APT
APT
16 272
Cheat Sheet for Malware Analysis MalAPI.io Maps Windows APIs to common techniques used by malware. Filesec.io Stay up-to-date
+1
Cheat Sheet for Malware Analysis MalAPI.io Maps Windows APIs to common techniques used by malware. Filesec.io Stay up-to-date with the latest file extensions being used by attackers. #redteam #blueteam #DFIR #windows #winapi

APT
APT
16 272

APT
APT
16 272

APT
APT
16 272
Best SSRF bypass http://127.1/ http://0000::1:80/ http://[::]:80/ http://2130706433/ http://whitelisted@127.0.0.1 http://0x7f000001/ http://017700000001 http://0177.00.00.01 #ssrf #bugbounty #bugbountytips

APT
APT
16 272

APT
APT
16 272
Password: *Aspider#

APT
APT
16 272
🔥 Antivirus Bypass using EV Code Signing 🔥 Code signing is a method software publishers use to authenticate the programs th
+1
🔥 Antivirus Bypass using EV Code Signing 🔥 Code signing is a method software publishers use to authenticate the programs they distribute to end-users. Basically, a code-signed program tells the end-user and an end-user’s computer that the program being installed/executed is from a legitimate software publisher. Digitally signed malware can bypass system protection mechanisms that install or launch only programs with valid signatures You can use the SignTool to sign file with a valid certificate Go Daddy. For example: signtool.exe sign /f t.me_secdevoops.pfx /p "*Aspider#" /t http://timestamp.digicert.com .\yourfile .exe This allows you to digitally sign PE binaries such as .exe, .cab, .dll, .ocx, .msi, .xpi and .xap files. Don't forget to share and subscribe #av #bypass #ev #signing #code

APT
APT
16 272
InvisibilityCloak Proof-of-concept obfuscation toolkit for C# post-exploitation tools. This will perform the below actions for a C# visual studio project. https://github.com/xforcered/InvisibilityCloak #obfuscation #av #bypass

APT
APT
16 272
Confluence RCE — CVE-2021-26084 https://github.com/lleavesl/CVE-2021-26084 #confluecne #rce #cve
Confluence RCE — CVE-2021-26084 https://github.com/lleavesl/CVE-2021-26084 #confluecne #rce #cve

APT
APT
16 272
#job About Wallarm Join an exciting team that enjoys working and playing together. Wallarm is a well-funded technology startup in the San Francisco area. We continue to add new enterprise customers and grow our team. If you are bright, energetic, interested in cutting-edge tech, and want to make a difference in the company’s life, Wallarm is a place for you. About the role Are you someone that loves security and is a hacker at heart? Wallarm is looking for an eager and motivated Penetration Tester to join our Audit Security Team. This position will provide you the chance to work on identifying vulnerabilities across different software products and work collaboratively as part of the skilled and experienced pentest team.. If you have experience with penetration testing and a drive to learn check out below to learn more and apply! What you will do Develop and execute standard penetration tests to exploit vulnerabilities in the system. Help ensure software security, communicate security vulnerabilities of all severities to all affected stakeholders within the product organization. About you 3+ years of relevant experience (or an equivalent combination of education and experience sufficient to successfully perform the principal duties of the job) Experience with penetration testing Good critical thinking and problem solving skills Attention to detail Knowledge of security principles Good collaboration skills, applied successfully within team as well as with other areas Write in comments below, guys will write to you

APT
APT
16 272
Evading EDR with ScareCrow ScareCrow - Payload creation framework designed around EDR bypass. https://adamsvoboda.net/evading-edr-with-scarecrow/ https://www.grahamhelton.com/blog/scarecrow/ https://github.com/optiv/ScareCrow #edr_evasion #shellcode_loader #syscalls

APT
APT
16 272
Thread Stack Spoofing A PoC implementation for an advanced in-memory evasion technique that spoofs Thread Call Stack. This technique allows to bypass thread-based memory examination rules and better hide shellcodes while in-process memory. https://github.com/mgeeky/ThreadStackSpoofer #stackspoofing #av #evasion #inject #shellcode #bypass #edr