DET – (extensible) Data Exfiltration Toolkit

This post presents the Data Exfiltration Toolkit (DET), an open-source framework that enables red teams and defenders to simulate and evaluate data exfiltration across multiple channels (e.g., social media, Gmail, Twitter, ICMP) using a plugin-based send/receive architecture and AES encryption. Inspired by real-world abuse of legitimate services (e.g., HammerToss) and accompanied by demos and BSides Ljubljana slides, it aims to help test and validate exfiltration detections and controls, with code available on GitHub.