CloakifyFactory - Data Exfiltration & Infiltration In Plain Sight; Convert any filetype into list of everyday strings, using Text-Based Steganography; Evade DLP/MLS Devices, Defeat Data Whitelisting Controls, Social Engineering of Analysts, Evade AV Detection

PyExfil — Python 3 toolkit for researching and stress-testing data exfiltration techniques across network, physical, and steganographic channels. For red team simulation and DLP detection testing.

PacketWhisper: Stealthily exfiltrate data and defeat attribution using DNS queries and text-based steganography. Avoid the problems associated with typical DNS exfiltration methods. Transfer data between systems without the communicating devices directly connecting to each other or to a common endpoint. No need to control a DNS Name Server.

Generates malicious LNK file payloads for data exfiltration

SecretPixel is a cutting-edge steganography tool designed to securely conceal sensitive information within images. It stands out in the realm of digital steganography by combining advanced encryption, compression, and a seeded Least Significant Bit (LSB) technique to provide a robust solution for embedding data undetectably.

A prototype malware C2 channel using x509 certificates over mTLS

A Red Team tool for exfiltrating sensitive data from Confluence pages.

A Red Team tool for exfiltrating sensitive data from Jira tickets.

Red Team tool for exfiltrating files from a target's Google Drive that you have access to, via Google's API.

Python code to extract chrome cookie, history and login data files

Red Team tool for exfiltrating the target organization's Google People Directory that you have access to, via Google's API.

Data exfiltration utility for testing detection capabilities

A FAFO project: Command execution and data exfiltration of any kind through live streaming platforms

Sneak past firewalls and exfiltrate data covertly. Encrypt your payload, disguise it as ICMP pings, and bypass network restrictions effortlessly. Unlock a stealthy way to transmit sensitive information across network barriers with Ping Smuggler!

Whitebox & Blackbox red-teaming framework for LLMs & Agentic AI apps. It analyzes your app's source code to discover tools, roles, and guardrails, then generates new attacks chains across several categories and adapts over multiple multi turn rounds to find vulnerabilities

PoC for GhostCommit Attack: Steal secrets via a pull request pointing to an image

CDitter - Electromechanical based data exfiltration, through the movement of a CD drive

Python Tool for sending files over the network by simply pinging hosts.

dnsSmuggler is a Python tool for covert data transfer over DNS. By encrypting and fragmenting data into DNS queries, dnsSmuggler bypasses network firewalls and restrictions, enabling stealthy data exfiltration and transmission across networks.

Receive data in ICMP padding from unix ping's -p option