Testing platform for covert data exfiltration techniques where sensitive documents are embedded into vector representations and tunneled out under the guise of legitimate RAG operations — bypassing traditional security controls and evading detection through semantic obfuscation.

A tiny flask app for helping pentesters, red-teamers and bug hunters in data exfileration, SSRF, XSS, Session Hijacking, Session Riding and Cookie Thieve.

Red team

Data exfiltration for an assume breach scenario via Web Bluetooth / BLE / Bluetooth Low Energy

Search for Unix binaries that can be exploited to bypass system security restrictions.

Linux post exploitation tool for info gathering and exfiltration 🐧📡💀

Awesome CSIRT is an curated list of links and resources in security and CSIRT daily activities.

Adrenaline CryptoSentinel: Proactive Protection Against Data Exfiltration and Reactive Ransomware Defense. Zero-Day resistant and much more....

Owly is a powerful password generation tool designed to create secure and diverse password lists for various purposes, including security audits, penetration testing, and password recovery. It combines Leetspeak transformations, common password patterns, and user input variations to generate up to 50,000 unique password combinations.

A simple way to exfiltrate data using spotify API

This project simulates a realistic SOC-style alert investigation involving file staging and data exfiltration using native Windows tools.

GTFOud (Get The File Out - upload/download edition) is a curated collection of legitimate scripting languages, utilities, binaries, libraries, packages, and tools that can be leveraged to transfer files

A stealthy data exfiltration and covert channel tool that uses encrypted ICMP echo request packets to transmit files securely over networks.

Transfer your file from an air-gapped device to another, using only qrcode, no wifi/usb/bluetooth needed.

A steganography tool for hiding and retrieving files from scratch projects.

trying to create a sample tool to exfiltrate data from a client to a server with dns queries ...

Retrieving files using post requests

This repo contains my own Ducky/BadUSB scripts, related PowerShell scripts and other Flipper Zero related stuff.

GTFOud (Get The File Out - upload/download edition) is a curated collection of legitimate scripting languages, utilities, binaries, libraries, packages, and tools that can be leveraged to transfer files

The Serverless Blind XSS App