Hide secrets with invisible characters in plain text securely using passwords 🧙🏻‍♂️⭐

Upload arbitrary data via Apple's Find My network.

CloakifyFactory - Data Exfiltration & Infiltration In Plain Sight; Convert any filetype into list of everyday strings, using Text-Based Steganography; Evade DLP/MLS Devices, Defeat Data Whitelisting Controls, Social Engineering of Analysts, Evade AV Detection

PyExfil — Python 3 toolkit for researching and stress-testing data exfiltration techniques across network, physical, and steganographic channels. For red team simulation and DLP detection testing.

PacketWhisper: Stealthily exfiltrate data and defeat attribution using DNS queries and text-based steganography. Avoid the problems associated with typical DNS exfiltration methods. Transfer data between systems without the communicating devices directly connecting to each other or to a common endpoint. No need to control a DNS Name Server.

[Draft]Awesome Cyber Security Resource Collection. Currently contains 8000+ open source repositories, and not very well classified. For each repository, extra info included: star count, commit count, last update time. This is the DRAFT version.

Generates malicious LNK file payloads for data exfiltration

SecretPixel is a cutting-edge steganography tool designed to securely conceal sensitive information within images. It stands out in the realm of digital steganography by combining advanced encryption, compression, and a seeded Least Significant Bit (LSB) technique to provide a robust solution for embedding data undetectably.

Golang binary for data exfiltration with ICMP protocol (+ ICMP bindshell, http over ICMP tunneling, ...)

Drive-by data exfiltration using open WiFi networks & DNS requests

VeilTransfer is a data exfiltration utility designed to test and enhance the detection capabilities. This tool simulates real-world data exfiltration techniques used by advanced threat actors, allowing organizations to evaluate and improve their security posture.

A prototype malware C2 channel using x509 certificates over mTLS

AI 应用合规网关 · 一行命令体检 AI 项目的「数据出境 / 硬编码密钥 / 个人信息暴露」（网安法·PIPL·等保2.0·数据出境·AI标识），并给出境内模型替代建议；可作运行时防护拦截注入与数据外泄 · 中文优先 · 零依赖 · 开源

A Red Team tool for exfiltrating sensitive data from Confluence pages.

A Red Team tool for exfiltrating sensitive data from Jira tickets.

Advanced Telegram x Discord C2, great for data Exfitration and Network evasion 🔷

Python code to extract chrome cookie, history and login data files

Living off the land Data Exfiltration methods

Red Team tool for exfiltrating files from a target's Google Drive that you have access to, via Google's API.

Red Team tool for exfiltrating the target organization's Google People Directory that you have access to, via Google's API.