Linux:
Data Exfiltration
Find, stage, compress, and transfer data from Linux systems
Linux File Transfer Without Common Tools
Living-off-the-land file transfer techniques for Linux using built-in utilities like /dev/tcp, base64, and proc when wget/curl/nc are unavailable.
High-Value Data Identification on Linux
Techniques for locating sensitive files, credentials, and critical data on Linux systems prior to exfiltration using native CLI tools.
Staging and Compressing Data for Exfiltration on Linux
Covers techniques for aggregating, archiving, and compressing sensitive data on Linux systems prior to exfiltration, including tar, zip, and encryption methods.
Linux data exfiltration covers techniques for moving collected data off a compromised host. This includes staging files for transfer, compressing and encrypting data, and using various channels like HTTP, DNS tunneling, and ICMP to get data out while avoiding detection.
The subpages walk through specific transfer methods and covert channels, from simple file downloads to protocol-based exfiltration that blends with normal traffic.