Transmits AM radio on computers without radio transmitting hardware.

Curated list of Unix binaries that can be exploited to bypass system security restrictions

An Information Security Reference That Doesn't Suck

CloakifyFactory - Data Exfiltration & Infiltration In Plain Sight; Convert any filetype into list of everyday strings, using Text-Based Steganography; Evade DLP/MLS Devices, Defeat Data Whitelisting Controls, Social Engineering of Analysts, Evade AV Detection

PacketWhisper: Stealthily exfiltrate data and defeat attribution using DNS queries and text-based steganography. Avoid the problems associated with typical DNS exfiltration methods. Transfer data between systems without the communicating devices directly connecting to each other or to a common endpoint. No need to control a DNS Name Server.

The Serverless Blind XSS App

Awesome CSIRT is an curated list of links and resources in security and CSIRT daily activities.

Ultrasonic networking - Transmitting TCP/IP via Ultrasound

Transfer files from Air gapped machines using QR codes

Search for Unix binaries that can be exploited to bypass system security restrictions.

👋 Stealthy data exfiltration via IPv6 covert channel

A collection of data exfiltration scripts for Red Team assessments.

Cisco Implant Raspberry Controlled Operations

Play audio files (.wav) via the system bus of your computer and pickup with an AM radio

File transfer via DNS

Data exfiltration utility for testing detection capabilities

DNS File EXfiltration

A Powerful Penetration Tool For Automating Penetration Tasks Such As Local Privilege Escalation, Enumeration, Exfiltration and More... Create Or Build Automation Modules To Speed Up Your Cyber Security Life

Blind XSS service alerting over slack or email

Transmissions over time based covert channels across a network

Exfiltration based on custom X509 certificates

Data exfiltration using DNS

Minimal forensic/exfiltration/evil-maid/rescue live boot system

CDitter – Electromechanical based data exfiltration

A tiny library to perform DNS queries based on RFC 1035, works only with UDP servers.

Leaking (a lot of) Data from Air-Gapped Computers via the (small) Hard Drive LED

Data exfiltration toolkit

mem'ry, tar pipe curl

Covert data exfiltration and detection using 802.11 beacon stuffing

Offensive Terraform module which creates EC2 instance and exfiltrate credential from Instance metadata to external URL.