Data Exfiltration

tastypepperoni/pplblade

Bypasses PPL protection to dump LSASS process memory, obfuscates dump files with XOR, and exfiltrates them remotely via RAW or SMB without writing to…

wkl-sec/wmiexec

Set of python scripts which perform different ways of command execution via WMI protocol.

blackhillsinfosec/skyhook

A round-trip obfuscated HTTP file transfer setup built to bypass IDS detections.

kingofthenops/cookie-monster

BOF-based tool to extract browser cookies and credentials from Chrome, Edge, and Firefox via handle duplication and fileless download, with offline…

magisterquis/chromecookiestealer

Steal/Inject Chrome cookies over the DevTools (--remote-debugging-port) protocol.

3nailsinfosec/dcvc2

Discord voice channel C2 framework for covert command and control operations. Transmits all data via RTP packets over voice channels, leaving no…

ustayready/golddigger

Recursively searches files for sensitive information using customizable regex patterns, designed for penetration testers to rapidly discover secrets…

soxoj/tiktok-scraper

Scrape and download TikTok video posts, user profiles, hashtag trends, and music feed metadata via CLI or Node.js module. Supports batch downloads,…

utkusen/shotlooter

a recon tool that finds sensitive data inside the screenshots uploaded to prnt.sc

vectra-ai-research/maad-af

MAAD Attack Framework - An attack tool for simple, fast & effective security testing of M365 & Entra ID (Azure AD).

cyberbutler/reddrop

Python Flask web server for capturing, processing, and logging encoded/encrypted payloads and tar archives, designed for penetration testers and red…

rxwx/chlonium

Clone and import Chromium cookies and passwords across browsers with offline DPAPI state key decryption, supporting AES-256 GCM encrypted databases…

ettic-team/dnsbin

DNS-based data exfiltration testing tool with bidirectional transfer, web UI, and client script for detecting blind RCE/XXE vulnerabilities in…

utkusen/wholeaked

a file-sharing tool that allows you to find the responsible person in case of a leakage

mrd0x/evilselenium

Weaponizes Selenium to automate credential theft, cookie dumping, email exfiltration, and file extraction from Chromium browsers for red team…

soxoj/telegram-bot-dumper

🔪 Dumper & ripper for Telegram bots by token. Golang version is also available!

p0dalirius/dumpsmbshare

A python script to dump files and folders remotely from a Windows SMB share.