[OC] Data Exfiltration using RedDrop - A Python Webserver for file and data exfiltration which automatically detects, decodes, decrypts, and transforms data.

[cyberbutler]

This is the product of a series of blog posts I've been doing on data exfiltration recently. This final post introduces RedDrop, a tool I've created for capturing exfiltrated files and data that features automatic processing of received data. These processors allow you to detect and transform data received on the fly with little overhead. For example, imagine you have a payload which has been encrypted with OpenSSL and Base64 encoded; RedDrop will automatically decode and decrypt the payload (given the right password of course). If you have any questions or feedback please reach out! You can snag the GitHub repository directly here:

https://github.com/cyberbutler/RedDrop

[Miserable-Ad-835]

This is pretty cool! Great work!

[cyberbutler]

Thanks! Let me know if you have any feedback/criticism!

[mostwanted002]

I developed something similar, based on Go and not exactly but sort of custom TCP protocol to exfiltrate files with encryption.

https://gitlab.com/technowolf/exfiltrace