HTTP/HTTPS:
Data Exfiltration
HTTP exfil via curl, SQLi, and out-of-band DNS channels
3 guides
•
Updated Mar 29, 2026
Exfiltrating Database Content via SQLi
Techniques for extracting database contents through SQL injection, covering UNION-based, blind, and out-of-band methods to retrieve sensitive data.
Data Exfiltration over HTTP and HTTPS
Covers techniques for tunnelling stolen data over HTTP/HTTPS traffic, exploiting trusted web protocols to bypass DLP controls and evade network detection.
Out-of-Band Data Exfiltration
Techniques for exfiltrating data covertly via HTTP/HTTPS using out-of-band channels, bypassing detection through encoded payloads, DNS queries, and indirect communication paths.