Hide secrets with invisible characters in plain text securely using passwords 🧙🏻‍♂️⭐

Upload arbitrary data via Apple's Find My network.

CloakifyFactory - Data Exfiltration & Infiltration In Plain Sight; Convert any filetype into list of everyday strings, using Text-Based Steganography; Evade DLP/MLS Devices, Defeat Data Whitelisting Controls, Social Engineering of Analysts, Evade AV Detection

PyExfil — Python 3 toolkit for researching and stress-testing data exfiltration techniques across network, physical, and steganographic channels. For red team simulation and DLP detection testing.

PacketWhisper: Stealthily exfiltrate data and defeat attribution using DNS queries and text-based steganography. Avoid the problems associated with typical DNS exfiltration methods. Transfer data between systems without the communicating devices directly connecting to each other or to a common endpoint. No need to control a DNS Name Server.

[Draft]Awesome Cyber Security Resource Collection. Currently contains 8000+ open source repositories, and not very well classified. For each repository, extra info included: star count, commit count, last update time. This is the DRAFT version.

Generates malicious LNK file payloads for data exfiltration

SecretPixel is a cutting-edge steganography tool designed to securely conceal sensitive information within images. It stands out in the realm of digital steganography by combining advanced encryption, compression, and a seeded Least Significant Bit (LSB) technique to provide a robust solution for embedding data undetectably.

Golang binary for data exfiltration with ICMP protocol (+ ICMP bindshell, http over ICMP tunneling, ...)

Drive-by data exfiltration using open WiFi networks & DNS requests

VeilTransfer is a data exfiltration utility designed to test and enhance the detection capabilities. This tool simulates real-world data exfiltration techniques used by advanced threat actors, allowing organizations to evaluate and improve their security posture.

A prototype malware C2 channel using x509 certificates over mTLS

A Red Team tool for exfiltrating sensitive data from Confluence pages.

AI 应用合规网关 · 一行命令体检 AI 项目的「数据出境 / 硬编码密钥 / 个人信息暴露」（网安法·PIPL·等保2.0·数据出境·AI标识），并给出境内模型替代建议；可作运行时防护拦截注入与数据外泄 · 中文优先 · 零依赖 · 开源

Advanced Telegram x Discord C2, great for data Exfitration and Network evasion 🔷

A Red Team tool for exfiltrating sensitive data from Jira tickets.

Python code to extract chrome cookie, history and login data files

Red Team tool for exfiltrating files from a target's Google Drive that you have access to, via Google's API.

Living off the land Data Exfiltration methods

Red Team tool for exfiltrating the target organization's Google People Directory that you have access to, via Google's API.