Impost3r

Impost3r Impost3r is a tool that aim to steal many kinds of linux passwordsincluding ssh,su,sudo written by C Attackers can use Impost3r to make a trap to steal the legal user's passwords XD This tool is limited to security research and teaching, and the user bears all legal and related...

dnsbin

dnsbin The request.bin of DNS request DNSBin is a simple tool to test data exfiltration through DNS and help test vulnerability like RCE or XXE when the environment has significant constraint. The project is in two parts, the first one is the web server and it's component. It offers a basic web U...

Invoke-DNSteal

Invoke-DNSteal is a Simple & Customizable DNS Data Exfiltrator. This tool helps you to exfiltrate data through DNS protocol over UDP and TCP, and lets you control the size of queries using random delay. Also, allows you to avoid detections by using random domains in each of your queries and you c...

SharpDNSExfil

SharpDNSExfil SharpDNSExfil is an exfiltration tool written in C. The main objective is to exfiltrate any "on disk" files without having to worry about restricted outbound connection. Prerequisite Remote machine should be able to resolve DNS Why did I do this? I got blind RCE during my engagement...

PacketWhisper

PacketWhisper PacketWhisper - Stealthily Transfer Data & Defeat Attribution Using DNS Queries & Text-Based Steganography, without the need for attacker-controlled Name Servers or domains; Evade DLP/MLS Devices; Defeat Data- & DNS Name Server Whitelisting Controls. Convert any file type e.g...

egression

Description EGRESSION is a tool that provides an instant view of how easy it is to upload sensitive data from any given network. It starts with a sensitive file with these contents, which is stored locally in plaintext. This file is used to test the egress / DLP controls on the network by...

SharpCovertTube

SharpCovertTube SharpCovertTube 是一个通过上传视频到 Youtube 来远程控制 Windows 系统的程序。 该程序会监控一个 Youtube 频道，直到有新视频上传，然后解码视频缩略图中的二维码并执行命令。视频中的二维码可以使用明文或 AES 加密的值。 它有两个版本：普通二进制版本和服务二进制版本，并包含一个用于生成恶意视频的 Python 脚本。其目的是作为一种仅使用 Google API 网络请求的持久化方法。 使用方法 在你的 Windows 系统中运行监听器： 它会每隔一段特定时间（默认 10 分钟）检查 Youtube...

CredPhish

CredPhish 是一个 PowerShell 脚本，旨在触发凭据提示并窃取密码。它依赖 CredentialPicker 收集用户密码，Resolve-DnsName 进行 DNS 外泄，以及 Windows Defender 的 ConfigSecurityPolicy.exe 来执行任意 GET 请求。 如需逐步指南，请参阅 Black Hills Infosec 文章。...

Arecibo

Arecibo Endpoint for Out-of-Band Exfiltration DNS & HTTP Authors Juan Manuel Fernández @TheXC3LL & Pablo Martinez @Xassiz DNS Exfiltration Create a new token: root@kitploit: curl localhost:5000/generatedns "htoken": "c008b5dd22817c50441522f917c66743" Now you can use this identificative token to d...

browsertunnel

browsertunnel Browsertunnel 是一款利用 DNS 协议从浏览器窃取数据的工具。其实现方式是滥用 dns-prefetch 功能——该功能旨在通过后台对指定域名进行 DNS 查找来降低网站的感知延迟。DNS 流量不会出现在浏览器的调试工具中，不会受页面内容安全策略（CSP）的阻止，且通常不会被企业防火墙或代理检查，因此它成为在受限场景中隐蔽传输数据的理想媒介。 这是一项古老的技术——DNS 隧道本身可以追溯到 90 年代，而 Patrick Vananti 在 2016 年就撰文介绍了如何利用 dns-prefetch 实现它，但据我所知，browsertunne...

DNSExfiltrator

DNSExfiltrator Author: Arno0x0x - @Arno0x0x DNSExfiltrator allows for transfering exfiltrate a file over a DNS request covert channel. This is basically a data leak testing tool allowing to exfiltrate data over a covert channel. DNSExfiltrator has two sides: 1. The server side , coming as a singl...

dnsteal

dnsteal v 2.0 Este es un servidor DNS falso que te permite extraer sigilosamente archivos de una máquina víctima a través de solicitudes DNS. A continuación se muestran un par de imágenes diferentes que muestran ejemplos de transferencia de múltiples archivos y transferencia de un solo archivo en...

dnsteal

dnsteal v 2.0 This is a fake DNS server that allows you to stealthily extract files from a victim machine through DNS requests. Below are a couple of different images showing examples of multiple file transfer and single verbose file transfer: Support for multiple files Gzip compression supported...

procrustes

Procrustes 一个 Bash 脚本，用于在拥有盲命令执行权限且除 DNS 外所有出站连接均被阻止的服务器上，通过 DNS 自动实现数据窃取。该脚本目前支持 sh、bash 和 powershell，并兼容 exec 类型的命令执行（例如 java.lang.Runtime.exec）。 非分段模式： 分段模式： 在运行过程中，脚本将用户希望在目标服务器上执行的命令作为输入，并根据目标 shell 类型对其进行转换，使其输出能够通过 DNS...

Collabfiltrator

Collabfiltrator Exfiltre la ejecución remota de código ciego Blind RCE y la salida de inyección SQL a través de DNS usando Burp Collaborator. Versión: 4.0.1 Autores: Adam Logue Jared McLaren Frank Scarpella Ryan Griffin Autores IA: Claude 3.5 Sonnet ChatGPT 4o Requisitos: Burp Suite Professional...

AdTran-Personal-Phone-Manager-Vulns

AdTran-Personal-Phone-Manager-Vulns A repository hosting write ups for the 0 days CVE-2021-25679, CVE-2021-25680, and CVE-2021-25681. Summary CVE-2021-25679: Adtran Personal Phone Manager Authenticated Stored XSS in Change Email Address Form CVE-2021-25680: Adtran Personal Phone Manager Multiple...

MAL-2026-16352 Malicious code in @baanx/blockchain-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b6dec4d715e2863e7f55749d6d2a390926f3f2f1df62e4de223c6acc818632d The package runs a bootstrap from both its install lifecycle script node index.js and its main module that invokes an obfuscated probe. The probe rea...

Malicious code in @baanx/blockchain-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b6dec4d715e2863e7f55749d6d2a390926f3f2f1df62e4de223c6acc818632d The package runs a bootstrap from both its install lifecycle script node index.js and its main module that invokes an obfuscated probe. The probe rea...

Malicious code in @insiderintelligence/componentlibrary (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4451c41559202c6bce3218de9af47cabe20288af5f3a9240076f25b3b2b5993 The package declares scripts.install: node index.js, so npm install auto-executes index.js which loads runtime/support/telemetry/probe/impl.js. That...

CVE-2026-75036 Fleet: DNS exfiltration via Sprig getHostByName in fleet.yaml Helm template preprocessing

A security vulnerability was discovered in Fleet's Helm template preprocessing where templates evaluated by the Fleet controller could reach network resources outside the management cluster. A user who can supply bundle content to a repository referenced by a GitRepo resource can cause the Fleet...