Comments (5)
It is a valid issues and it had not yet had an open ticket but it is intended for some of the exfiltration methods. Would you like to send back strings or files?
from pyexfil.
I think he is talking about sending back commands to the "sending" client, TBH this shouldn't be too hard for ICMP and HTTP, but, for the UDP based protocols I believe this is impossible.
from pyexfil.
@bararchy is correct in understanding, effectively, the ability to upload/download files, run commands and recieve output, etc. That way one could write plugins in Python, have them ran using exec() or similar and have output passed back for more implant functionality. Would probably be a bit outside the scope of exfil alone, but a very, very cool thing :)
It actually is possible to do this over DNS - see https://github.com/rwhitcroft/dnschan :)
from pyexfil.
It is very possible. It is in one of the next stages. Practically it is already built just needs a bit tweaking with the current 2 module. These are one of the next mile stones after we finish basic QA we can turn this into a more robust platform and then not only file but also "regular strings" with verification will be possible.
from pyexfil.
Seems solved.
from pyexfil.
Related Issues (17)
- Verify all files HOT 2
- zlib not found error when pip installing requirements.txt HOT 1
- PyExfil tool into DNS queries working
- Inserted comma instead of 'as' HOT 1
- pytube3 HOT 3
- Set zip_safe flag to True in setup.py setup()
- Could not find a version that satisfies the requirement ftplib HOT 2
- File name save HOT 1
- Clean install doesn't work HOT 6
- PyExfil
- 'scipy.signal' has no attribute 'qammod'
- Installation fails because zlib is not installed HOT 2
- Djdh HOT 1
- Argument Handeling HOT 1
- Monkey Code HOT 2
- Scapy HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from pyexfil.