{"id":3929,"date":"2015-07-14T04:59:07","date_gmt":"2015-07-13T20:59:07","guid":{"rendered":"https:\/\/www.darknet.org.uk\/?p=3929"},"modified":"2015-09-09T19:36:35","modified_gmt":"2015-09-09T11:36:35","slug":"egress-assess-test-network-egress-data-detection","status":"publish","type":"post","link":"https:\/\/www.darknet.org.uk\/2015\/07\/egress-assess-test-network-egress-data-detection\/","title":{"rendered":"Egress-Assess &#8211; Test Network Egress Data Detection"},"content":{"rendered":"<p>Egress-Assess is a tool used to test network egress data detection capabilities, it works over FTP, HTTP and HTTPS. It can generate various data-types to test detection, credit card details, social security numbers (SSN) and name\/address combos.<\/p>\n<p align=\"center\"><img decoding=\"async\" src=\"https:\/\/farm4.staticflickr.com\/3818\/19674056111_0d7f2af0ea.jpg\" alt=\"Egress-Assess - Test Network Egress Data Detection\" \/><\/p>\n<p>This tool is designed to be an easy way to test exfiltrating data from the network you are currently plugged into.  Used for red or blue teams that want to test network boundary egress detection capabilities.<\/p>\n<p>Typical use case for Egress-Assess is to copy this tool in two locations. One location will act as the server, the other will act as the client.<\/p>\n<h3>Usage<\/h3>\n<p><script async src=\"https:\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-3033787195489589\"\r\n     crossorigin=\"anonymous\"><\/script>\r\n<!-- Darknet Responsive Post Ad Links [previously link ad unit] -->\r\n<ins class=\"adsbygoogle\"\r\n     style=\"display:block\"\r\n     data-ad-client=\"ca-pub-3033787195489589\"\r\n     data-ad-slot=\"5456620019\"\r\n     data-ad-format=\"auto\"><\/ins>\r\n<script>\r\n     (adsbygoogle = window.adsbygoogle || []).push({});\r\n<\/script><br \/>\nTo extract data over FTP, you would first start Egress-Assess\u2019s FTP server by selecting \u201c&#8211;server ftp\u201d and providing a username and password to use:<\/p>\n<pre>.\/Egress-Assess.py --server ftp --username testuser --password pass123<\/pre>\n<p>Now, to have the client connect and send data to the ftp server, you could run&#8230;<\/p>\n<pre>.\/Egress-Assess.py --client ftp --username testuser --password pass123 --ip 192.168.63.149 --datatype ssn<\/pre>\n<p>Also, you can setup Egress-Assess to act as a web server by running&#8230;.<\/p>\n<pre>.\/Egress-Assess.py --server https<\/pre>\n<p>Then, to send data to the FTP server, and to specifically send 15 megs of credit card data, run the following command&#8230;<\/p>\n<pre>.\/Egress-Assess.py --client https --data-size 15 --ip 192.168.63.149 --datatype cc<\/pre>\n<p>You can download Egress-Assess here:<\/p>\n<p><a href=\"https:\/\/github.com\/ChrisTruncer\/Egress-Assess\/archive\/1.0.zip\">v1.0.zip<\/a><\/p>\n<p>Or read more <a href=\"https:\/\/github.com\/ChrisTruncer\/Egress-Assess\">here<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Egress-Assess is a tool used to test network egress data detection capabilities, it works over FTP, HTTP and HTTPS. It can generate various data-types to test detection, credit card details, social security numbers (SSN) and name\/address combos. This tool is designed to be an easy way to test exfiltrating data from the network you are [&hellip;]<\/p>\n","protected":false},"author":25,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_seopress_robots_primary_cat":"","_seopress_titles_title":"","_seopress_titles_desc":"Egress-Assess is a tool used to test network egress data detection capabilities, it works over FTP, HTTP and HTTPS and generates it's own data for testing.","_seopress_robots_index":"","_genesis_hide_title":false,"_genesis_hide_breadcrumbs":false,"_genesis_hide_singular_image":false,"_genesis_hide_footer_widgets":false,"_genesis_custom_body_class":"","_genesis_custom_post_class":"","_genesis_layout":"","footnotes":""},"categories":[12,5,11],"tags":[409,215],"featured_image_src":null,"featured_image_src_square":null,"author_info":{"display_name":"Darknet","author_link":"https:\/\/www.darknet.org.uk\/author\/darknet\/"},"_links":{"self":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts\/3929"}],"collection":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/users\/25"}],"replies":[{"embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/comments?post=3929"}],"version-history":[{"count":0,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts\/3929\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/media?parent=3929"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/categories?post=3929"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/tags?post=3929"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}