# Data Exfiltration

> Find, stage, compress, and transfer data from Linux systems

- **URL:** https://hackindex.io/platforms/linux/data-exfiltration
- **Platform:** [Linux](https://hackindex.io/platforms/linux.md)
- **Published:** 2026-03-16
- **Updated:** 2026-03-29

Linux data exfiltration covers techniques for moving collected data off a compromised host. This includes staging files for transfer, compressing and encrypting data, and using various channels like HTTP, DNS tunneling, and ICMP to get data out while avoiding detection.

The subpages walk through specific transfer methods and covert channels, from simple file downloads to protocol-based exfiltration that blends with normal traffic.

## Guides

- [Linux File Transfer Without Common Tools](https://hackindex.io/platforms/linux/data-exfiltration/file-transfer-without-tools.md): Living-off-the-land file transfer techniques for Linux using built-in utilities like /dev/tcp, base64, and proc when wget/curl/nc are unavailable.
- [High-Value Data Identification on Linux](https://hackindex.io/platforms/linux/data-exfiltration/high-value-data-identification.md): Techniques for locating sensitive files, credentials, and critical data on Linux systems prior to exfiltration using native CLI tools.
- [Staging and Compressing Data for Exfiltration on Linux](https://hackindex.io/platforms/linux/data-exfiltration/staging-and-compressing-data.md): Covers techniques for aggregating, archiving, and compressing sensitive data on Linux systems prior to exfiltration, including tar, zip, and encryption methods.