GTFOBins is a curated list of Unix binaries that can be used to bypass local security restrictions in misconfigured systems

• UpdatedOct 28, 2024
• HTML

Transmits AM radio on computers without radio transmitting hardware.

• UpdatedSep 25, 2024
• C

CloakifyFactory - Data Exfiltration & Infiltration In Plain Sight; Convert any filetype into list of everyday strings, using Text-Based Steganography; Evade DLP/MLS Devices, Defeat Data Whitelisting Controls, Social Engineering of Analysts, Evade AV Detection

• UpdatedNov 24, 2020
• Python

PacketWhisper: Stealthily exfiltrate data and defeat attribution using DNS queries and text-based steganography. Avoid the problems associated with typical DNS exfiltration methods. Transfer data between systems without the communicating devices directly connecting to each other or to a common endpoint. No need to control a DNS Name Server.

• UpdatedJun 3, 2021
• Python

Awesome CSIRT is an curated list of links and resources in security and CSIRT daily activities.

• UpdatedSep 29, 2024
• C

Simple Windows and Linux keystroke injection tool that exfiltrates stored WiFi data (SSID and password).

• UpdatedMar 19, 2024
• PowerShell

Owlyshield is an EDR framework designed to safeguard vulnerable applications from potential exploitation (C&C, exfiltration and impact).

• UpdatedJul 15, 2024
• Rust

A Powerful Penetration Tool For Automating Penetration Tasks Such As Local Privilege Escalation, Enumeration, Exfiltration and More... Use Or Build Automation Modules To Speed Up Your Cyber Security Life

• UpdatedNov 8, 2022
• Python

This repo contains my own Ducky/BadUSB scripts, related PowerShell scripts and other Flipper Zero related stuff.

• UpdatedMay 14, 2024
• PowerShell

The Serverless Blind XSS App

• UpdatedFeb 4, 2025
• JavaScript

CredPhish is a PowerShell script designed to invoke legitimate credential prompts and exfiltrate passwords over DNS.

• UpdatedJul 27, 2021
• PowerShell

Bounces when a fish bites - Evilginx database monitoring with exfiltration automation

• UpdatedJun 9, 2024
• Python

Drive-by data exfiltration using open WiFi networks & DNS requests

• UpdatedNov 26, 2023
• C++

Search for Unix binaries that can be exploited to bypass system security restrictions.

• UpdatedMay 16, 2021
• Python

Ultrasonic networking - Transmitting TCP/IP via Ultrasound

• UpdatedJun 26, 2022
• Python

Transfer files from Air gapped machines using QR codes

• UpdatedJun 19, 2021
• Python

👋 Stealthy data exfiltration via IPv6 covert channel

• UpdatedJul 26, 2019
• Python

A collection of data exfiltration scripts for Red Team assessments.

• UpdatedFeb 21, 2020
• PowerShell

Transferring Backdoor Payloads with BMP Image Pixels

• UpdatedJun 5, 2023
• Shell

DriveFS Sleuth is a Python tool that automates investigating Google Drive File Stream disk artifacts, the tool has been developed based on research that has been performed by mounting different scenarios and noting down the changes in the Google Drive File Stream disk artifacts.

• UpdatedDec 20, 2024
• Python