Data Exfiltration
Course Description
Learn data exfiltration techniques to understand how attackers extract sensitive information from compromised networks.
Course Structure
Modules
Module 1: Data Discovery (5h)
- Sensitive data identification
- File system searching
- Database enumeration
- Cloud storage discovery
Module 2: Data Staging (4h)
- Compression techniques
- Encryption
- Chunking
- Staging locations
Module 3: Protocol Exfiltration (6h)
- DNS exfiltration
- HTTP/HTTPS
- ICMP tunneling
- SMB exfiltration
Module 4: Covert Channels (6h)
- Steganography
- Protocol manipulation
- Timing channels
- Out-of-band techniques
Module 5: Cloud Exfiltration (5h)
- Cloud storage abuse
- SaaS exploitation
- Cross-tenant exfil
- Cloud email abuse
Module 6: Physical Exfiltration (4h)
- USB exfiltration
- Network drops
- Physical document theft
- Camera/audio
Module 7: DLP Bypass (5h)
- DLP detection methods
- Evasion techniques
- Encryption bypass
- Volume limitations
Tools
| Tool | Purpose |
|---|---|
| dnscat2 | DNS exfil |
| CloakifyFactory | Data hiding |
| PacketWhisper | Covert exfil |
| Egress-Assess | Testing |
📄️ Overview
Data theft techniques: covert channels, DLP bypass, and exfiltration methods