TGViewer
Channel Public Channel
APT

APT

@apt_notes

This channel discusses:

— Offensive Security
— RedTeam
— Malware Research
— OSINT
— etc

Disclaimer:
t.me/APT_Notes/6

Chat Link:
t.me/APT_Notes_PublicChat
Open in Telegram
Subscribers
16.9K
Photos
565
Videos
28
Links
909

Showing posts older than #194 · Back to latest

Older Posts 19 shown
Post #191 157
Managing SSH Access at Scale with HashiCorp Vault


Learn how to build scalable, role-based SSH access with SSH certificates and HashiCorp Vault.

#vault
Post #189 148
Let see this for blogspot.com, this is a reverse proxy setting that checks subdomains and routes them accordingly, now let's change the host for it.

IMG 1 : Target = Host
IMG 2 : Target != Host, but still the request is routed through the host.
Post #188 152
#BurpHacksForBounties - Tip 16/30

Host Header Hacks with Burp Suite's repeater. For webserver, serving requests through reverse proxy, don't forget to try this technique out. Learnt from @lbinowax

Quick read and How to 👇🏼


#infosec #appsec #burp #bugbounties #bugbountytips
Post #187 196
Reconflow

This is all in one tool for gathering reconnaissance information about a target without the hassle of installing multiple tools and their dependencies & also presents you the results to your telegram chat.

https://github.com/adarshshetty18/reconflow

#recon #bugbounty #telegram
GitHub GitHub - adarshshetty18/reconflow: Reconflow is all in one tool for gathering reconnaissance information about a target in a penetration… Reconflow is all in one tool for gathering reconnaissance information about a target in a penetration test - adarshshetty18/reconflow
Post #183 206
Remote Code Execution in cdnjs of CloudFlare

https://blog.ryotak.me/post/cdnjs-remote-code-execution-en/

#RCE #cdnjs #cloudflare
blog.ryotak.net Remote code execution in cdnjs of Cloudflare Preface (日本語版も公開されています。) Cloudflare, which runs cdnjs, is running a “Vulnerability Disclosure Program” on HackerOne, which allows hackers to perform vulnerability assessments. This article describes vulnerabilities reported through this program and published…
Post #182 203
Basic hacking tools cheat-sheet


#infosec #security #webapp #appsec #cybersecurity
Post #179 186
#BurpHacksForBounties - Tip 14/30

Burp Suite Config provides options for handling configurations for User-level and project-level options.

I personally use this configuration :

#appsec #infosec #burp #bugbountytips #bugbountytip
Post #176 210
You might need to do the same for other ports eg 443 as well.
Post #175 234
- Add Burp CA to device
- Bypass cert pinning
- Root the device(required for iptable)

Dport 80 routing - run these commands

iptables -t nat -A OUTPUT -p tcp --dport 80 -j DNAT --to-destination <BURP_IP>:8080
iptables -t nat -A POSTROUTING -p tcp --dport 80 -j MASQUERADE
Post #174 232
#BurpHacksForBounties - Day 12/30

IPtables + Burp Suite + Android Applications. 😍🤓🤫😀
Tricky and length but worth setting up.

#burp #bugbountytips #infosec #security #appsec #bugbountytip
Older posts →
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →