data-exfiltration 开源项目推荐（158 个）

KuroLabs /stegcloak

使用密码，通过不可见字符在纯文本中安全地隐藏秘密

positive-security /send-my

通过 Apple 的 Find My 网络上传任意数据。

TryCatchHCF /Cloakify

CloakifyFactory - Data Exfiltration & Infiltration In Plain Sight; Convert any filetype into list of everyday strings, using Text-Based Steganography; Evade DLP/MLS Devices, Defeat Data Whitelisting Controls, Social Engineering of Analysts, Evade AV Detection

ytisf /PyExfil

PyExfil — 用于研究和压力测试跨网络、物理与隐写信道数据外泄技术的 Python 3 工具包。适用于红队模拟和 DLP 检测测试。

TryCatchHCF /PacketWhisper

PacketWhisper: Stealthily exfiltrate data and defeat attribution using DNS queries and text-based steganography. Avoid the problems associated with typical DNS exfiltration methods. Transfer data between systems without the communicating devices directly connecting to each other or to a common endpoint. No need to control a DNS Name Server.

alphaSeclab /awesome-cyber-security

[Draft]Awesome Cyber Security Resource Collection. Currently contains 8000+ open source repositories, and not very well classified. For each repository, extra info included: star count, commit count, last update time. This is the DRAFT version.

Plazmaz /LNKUp

生成恶意LNK文件有效负载以进行数据泄露

x011 /SecretPixel

SecretPixel 是一款尖端的隐写工具，旨在安全地隐藏图像中的敏感信息。它在数字隐写领域脱颖而出，结合了先进的加密、压缩和种子最低有效位（LSB）技术，提供了稳健的隐写数据嵌入解决方案。

ariary /QueenSono

Golang binary for data exfiltration with ICMP protocol (+ ICMP bindshell, http over ICMP tunneling, ...)

LyndLabs /DNS-DriveBy

Drive-by data exfiltration using open WiFi networks & DNS requests

infosecn1nja /VeilTransfer

VeilTransfer is a data exfiltration utility designed to test and enhance the detection capabilities. This tool simulates real-world data exfiltration techniques used by advanced threat actors, allowing organizations to evaluate and improve their security posture.

jconwell /secret_handshake

A prototype malware C2 channel using x509 certificates over mTLS

jnMetaCode /shellward

AI 应用合规网关 · 一行命令体检 AI 项目的「数据出境 / 硬编码密钥 / 个人信息暴露」（网安法·PIPL·等保2.0·数据出境·AI标识），并给出境内模型替代建议；可作运行时防护拦截注入与数据外泄 · 中文优先 · 零依赖 · 开源

antman1p /Conf-Thief

A Red Team tool for exfiltrating sensitive data from Confluence pages.

ELMERIKH /TelecordC2

Advanced Telegram x Discord C2, great for data Exfitration and Network evasion 🔷

antman1p /Jir-Thief

A Red Team tool for exfiltrating sensitive data from Jira tickets.

lolexfil /lolexfil.github.io

Living off the land Data Exfiltration methods

antman1p /GD-Thief

Red Team tool for exfiltrating files from a target's Google Drive that you have access to, via Google's API.

mehulj94 /Snatch

Python code to extract chrome cookie, history and login data files

antman1p /GDir-Thief

Red Team tool for exfiltrating the target organization's Google People Directory that you have access to, via Google's API.