# Data Exfiltration

> Capture and exfiltrate MQTT topic payloads including credentials and teleme

- **URL:** https://hackindex.io/services/mqtt/data-exfiltration
- **Service:** [MQTT](https://hackindex.io/services/mqtt.md)
- **Published:** 2026-03-16
- **Updated:** 2026-03-29

MQTT brokers often carry sensitive operational data in plaintext across topics. Subscribing to wildcard topics (#) on a misconfigured broker can expose credentials, telemetry, internal commands, and device state.

Retained messages persist on the broker and are delivered to new subscribers automatically, making them a valuable source of historical data. Intercepting live message flows reveals communication patterns and data formats that feed further exploitation.

## Guides

- [MQTT Topic Data Capture and Exfiltration](https://hackindex.io/services/mqtt/data-exfiltration/mqtt-topic-data-capture.md)