Linux:

Data Exfiltration

Find, stage, compress, and transfer data from Linux systems

3 guides • Created Mar 16, 2026 • Updated Mar 29, 2026

3 guides

Linux File Transfer Without Common Tools

Living-off-the-land file transfer techniques for Linux using built-in utilities like /dev/tcp, base64, and proc when wget/curl/nc are unavailable.

Mar 16, 2026 • 4 min read

High-Value Data Identification on Linux

Techniques for locating sensitive files, credentials, and critical data on Linux systems prior to exfiltration using native CLI tools.

Mar 16, 2026 • 4 min read

Staging and Compressing Data for Exfiltration on Linux

Covers techniques for aggregating, archiving, and compressing sensitive data on Linux systems prior to exfiltration, including tar, zip, and encryption methods.

Mar 16, 2026 • 3 min read

Linux data exfiltration covers techniques for moving collected data off a compromised host. This includes staging files for transfer, compressing and encrypting data, and using various channels like HTTP, DNS tunneling, and ICMP to get data out while avoiding detection.

The subpages walk through specific transfer methods and covert channels, from simple file downloads to protocol-based exfiltration that blends with normal traffic.