PacketWhisper

Data Stealer

A tool for stealthy data transfer using DNS queries and text-based steganography to evade attribution and detection.

PacketWhisper: Stealthily exfiltrate data and defeat attribution using DNS queries and text-based steganography. Avoid the problems associated with typical DNS exfiltration methods. Transfer data between systems without the communicating devices directly connecting to each other or to a common endpoint. No need to control a DNS Name Server.

GitHub

624 stars
19 watching
116 forks
Language: Python
last commit: over 5 years ago
Linked from 1 awesome list

cryptographydata-exfiltrationdlpexfiltrationhackinghacking-toolspentest-toolpentestingred-teamsecuritysecurity-toolssteganography

Backlinks from these awesome lists:

Related projects:

RepositoryDescriptionStars
trycatchhcf/cloakifyA tool for hiding data in plain sight by transforming it into innocuous-looking strings1,566
punk-security/dnsreaperA tool used to detect subdomain takeovers in DNS records and identify potential security vulnerabilities.2,037
zerbea/hcxdumptoolA tool to capture and analyze packets from WLAN devices.1,858
anirudhbiyani/findmytakeoverDetects DNS record misconfigurations that could be exploited by attackers135
fsecurelabs/drefA tool designed to exploit DNS rebinding vulnerabilities in web applications, allowing it to bypass security restrictions and exfiltrate sensitive data486
arno0x/dnsexfiltratorA tool for transferring files over DNS requests without being detected851
darryllane/blutoTools for gathering information about and exploiting vulnerabilities in domains620
defparam/smugglerAn HTTP Request Smuggling / Desync testing tool written in Python 31,840
deepfence/packetstreamerA tool for collecting and streaming network traffic from multiple machines for forensic analysis and security monitoring1,891
danmcinerney/dnsspoofA DNS spoofing tool that alters DNS responses before they reach the router.280
lazytitan33/dns-exfilnspectorAutomatically decodes DNS Exfiltration queries to convert Blind RCE into proper RCE via Burp Collaborator8
paulsec/detA toolkit for testing network monitoring and data leakage prevention solutions against various data exfiltration techniques158
anshumanpattnaik/http-request-smugglingDetects HTTP Request Smuggling vulnerabilities in web applications476
iphelix/dnschefA highly configurable DNS proxy tool for intercepting and modifying DNS queries during network traffic analysis.910
tecknicaltom/dsniffA collection of network auditing and penetration testing tools that sniff various protocols to reveal security vulnerabilities.191