TGViewer
Channel Public Channel
APT

APT

@apt_notes

This channel discusses:

— Offensive Security
— RedTeam
— Malware Research
— OSINT
— etc

Disclaimer:
t.me/APT_Notes/6

Chat Link:
t.me/APT_Notes_PublicChat
Open in Telegram
Subscribers
17K
Photos
565
Videos
28
Links
909

Showing posts older than #87 · Back to latest

Older Posts 20 shown
Post #86 845
#research

ALPACA Attack: Application Layer Protocol Confusion - Analyzing and mitigating Cracks in tls Authentication.

# https://alpaca-attack.com/
# https://thehackernews.com/2021/06/new-tls-attack-lets-attackers-launch.html

# https://github.com/RUB-NDS/alpaca-code/
The Hacker News New TLS Attack Lets Attackers Launch Cross-Protocol Attacks Against Secure Sites ALPACA Attack: A new TLS attack allows attackers to launch cross-protocol attacks against secure sites.
Post #80 348
#tools
Check live webapps from domain list

cat subdomains.txt | sed -E 's#https?://##I' | sed -E 's#/.*##' | sed -E 's#^\*\.?##' | sed -E 's#,#\n#g' | tr '[:upper:]' '[:lower:]' | uniq | sed -e 's/^/https:\/\//' | httpx -silent -timeout 2 -threads 100 -status-code -mc 200,302 |anew
Post #76 324
#bugbounty One of the largest security testing checklist

Один из самых больших чеклистов в интернете по тестированию веб-приложений.
Post #72 383
#bugbounty
Post #71 375
#bugbounty
Post #67 368
APT Do you have problems with security requirements related to any business feature?
#Tools
For those 18% who checked
"Yes. I want to find a complete set of them"
ASVS (eng) Link

For those 19% who wanted a "classified set of requirements with references to test-cases" we did this tool:
- Github repo
- Cloud version
Older posts →
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →