{"repo":"ytisf/PyExfil","free":true,"listed":false,"github":"https://github.com/ytisf/PyExfil","clone":"git clone https://github.com/ytisf/PyExfil.git","description":"PyExfil — Python 3 toolkit for researching and stress-testing data exfiltration techniques across network, physical, and steganographic channels. For red team simulation and DLP detection testing.","language":"Python","stars":808,"topics":["python","data-exfiltration","icmp","quic","dns","qrcode","http-cookies","regin","steganography","bgp"],"license":"MIT","category":"networking-infra","readme_excerpt":"PyExfil Stress Testing Detection & Creativity PyExfil was born as a PoC and kind of a playground and grew to be something a bit more. In my eyes it's still a messy PoC that needs a lot more work and testing to become stable . The purpose of PyExfil is to set as many exfiltration, and now also communication, techniques that CAN be used by various threat actors/malware around to bypass various detection and mitigation tools and techniques. You can track changes at the official GitHub page. Putting it simply, it's meant to be used as a testing tool rather than an actual Red Teaming tool. Although most techniques and methods should be easily ported and compiled to various operating systems, some stable some experimental, the transmission mechanism should be stable on all techniques. Clone it, deploy on a node in your organization and see which systems can catch which techniques. Getting Started PIP For using pip (not necessarily the most updated): Prerequisites For source: We recommend installing py2exe as well so that you may cross compile various modules to a binary for easier transportation. You can do that with: Installing Go to the same folder where PyExfil was cloned to and: List of Techniques Network DNS query HTTP Cookie ICMP (8) NTP Body BGP Open HTTPS Replace Certificate QUIC - No Certificate Slack Exfiltration POP3 Authentication (as password) - Idea thanks to Itzik Kotler FTP MKDIR - Idea thanks to Itzik Kotler Source IP-based Exfiltration HTTP Response IMAP Draft Com","default_branch":null,"files":null,"tree":[],"storefront":"/r/ytisf","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/ytisf/PyExfil/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}