APT
This channel discusses: — Offensive Security — RedTeam — Malware Research — OSINT — etc Disclaimer: t.me/APT_Notes/6 Chat Link: t.me/APT_Notes_PublicChat
What our data says
- Created between November 2017 and June 2021.
- Ranks 17th by subscribers among English-language security channels we track.
- Bigger than 87% of the channels created in the same period.
- Had not posted for 10 months when we last checked — longer than 55% of English-language security channels.
This channel is part of the discussion
APT appears in 10 event pages on TGScopeResetNightmare ResetNightmare (CVE-2026-27912) is a validation flaw in the Kerberos Change Password protocol that allows for resetting the password of any target user/computer account, without knowing the current one. The attack requires an unpatched domain controller, and the…
Pentest award 2026 ждет твою заявку! Меньше двух недель остается чтобы отправить заявки на «хакерский оскар». Не упускайте шанс получить признание отрасли, классные призы и просто провести время на закрытой церемонии награждения вместе с лучшими представителями отрасли.…
🔒 Certi-Bhai — IIS AppPool → NT AUTHORITY\SYSTEM via AD CS RPC A webshell under IIS AppPool\DefaultAppPool can enroll against the ADCS RPC endpoint and come back with a certificate for the host machine account. Outbound domain traffic from a virtual AppPool identity is…
Pentest award 2026 ждет твою заявку! Меньше двух недель остается чтобы отправить заявки на «хакерский оскар». Не упускайте шанс получить признание отрасли, классные призы и просто провести время на закрытой церемонии награждения вместе с лучшими представителями отрасли.…
ResetNightmare ResetNightmare (CVE-2026-27912) is a validation flaw in the Kerberos Change Password protocol that allows for resetting the password of any target user/computer account, without knowing the current one. The attack requires an unpatched domain controller, and the…
💉 P³ — Shellcode Loader: Process Parameter Poisoning This loader implements a code injection technique that leverages the Windows Process Parameters structure (PEB) as a staging and execution location for remote shellcode injection. By passing payload data implicitly through…