Egress-Assess is a tool used to test network egress data detection capabilities, it works over FTP, HTTP and HTTPS. It can generate various data-types to test detection, credit card details, social security numbers (SSN) and name/address combos.
This tool is designed to be an easy way to test exfiltrating data from the network you are currently plugged into. Used for red or blue teams that want to test network boundary egress detection capabilities.
Typical use case for Egress-Assess is to copy this tool in two locations. One location will act as the server, the other will act as the client.
Usage
To extract data over FTP, you would first start Egress-Assess’s FTP server by selecting “–server ftp” and providing a username and password to use:
|
1 |
./Egress-Assess.py --server ftp --username testuser --password pass123 |
Now, to have the client connect and send data to the ftp server, you could run…
|
1 |
./Egress-Assess.py --client ftp --username testuser --password pass123 --ip 192.168.63.149 --datatype ssn |
Also, you can setup Egress-Assess to act as a web server by running….
|
1 |
./Egress-Assess.py --server https |
Then, to send data to the FTP server, and to specifically send 15 megs of credit card data, run the following command…
|
1 |
./Egress-Assess.py --client https --data-size 15 --ip 192.168.63.149 --datatype cc |
You can download Egress-Assess here:
Or read more here.