Sneaky-creeper

Sneakily creeping in and out of your network Download Star

What's leaving your network through the CRM?

Modern enterprises rely on third-party cloud services extensively. Do you monitor data uploaded to them? This trust can be abused to smuggle critical business data past perimeter defenses. Instead of building and maintaining custom infrastructure to control malicious software, attackers can simply rely on legitimate third parties to transport their data for them.

diagram of sneaky-creeper's functionality, showing the ability to link encoder modules and channel modules together to obfuscate then transport data across the internet

Sneaky-creeper is an open-source project that allows security professionals to emulate the tactics of these advanced adversaries quickly and without expensive custom tools. Its permissive license and modular design allow for the easy addition of additional transport methods to tailor an assessment for your unique requirements. Interested? Learn more at the Striker Security blog.

Striker Security is the primary contributor to sneaky-creeper, with unparalleled depth of expertise. Contact us today for custom exfiltration channels, feature additions, training, or operational support, or get involved on Github!