Data Exfiltration

bee-san/pywhat

🐸 Identify anything. pyWhat easily lets you identify emails, IP addresses, and more. Feed it a .pcap file or some text and it'll tell you what it…

antman1p/gdir-thief

Red Team tool for exfiltrating the target organization's Google People Directory that you have access to, via Google's API.

blacklanternsecurity/manspider

Spider entire networks for juicy files sitting on SMB shares. Search filenames or file content - regex supported!

bluepigeonproject/blue-pigeon

Blue Pigeon is a Bluetooth-based data exfiltration and proxy tool to enable communication between a remote Command and Control (C2) server and a…

tokyoneon/credphish

PowerShell script that invokes legitimate credential prompts and exfiltrates captured passwords over DNS using CredentialPicker and Resolve-DnsName.

c6fc/warcannon

High speed/Low cost CommonCrawl RegExp in Node.js

eksperience/knockoutlook

C# tool for red team operations that extracts contacts, mailbox metadata, and searches emails via Outlook COM object, with built-in Programmatic…

citcheese/odbparser

OSINT tool to search, parse and dump only the open Elasticsearch and MongoDB directories that have the data you care about exposing

iomoath/sharpstrike

A Post exploitation tool written in C# uses either CIM or WMI to query remote systems.

hunniccyber/sharpml

Machine Learning Network Share Password Hunting Toolkit

moloch--/leakdb

Web-Scale NoSQL Idempotent Cloud-Native Big-Data Serverless Plaintext Credential Search

kiprotect/kodex

A privacy and security engineering toolkit: Discover, understand, pseudonymize, anonymize, encrypt and securely share sensitive and personal data:…

ricardojoserf/http-protocol-exfil

Exfiltrate files using the HTTP protocol version ("HTTP/1.0" is a 0 and "HTTP/1.1" is a 1)

twistlock/whoc

A container image that exfiltrates the underlying container runtime to a remote server

ingokl/httpuploadexfil

A simple HTTP server for delivering and exfiltrating files/data during, for example, CTFs.

psmths/reave

WIP Post-exploitation framework tailored for hypervisors.

ariary/queensono

Golang binary for data exfiltration with ICMP protocol (+ ICMP bindshell, http over ICMP tunneling, ...)