Exfiltrating data through Dropbox

We have already learned about getting reverse shells on Empire and using Empire to achieve persistence on the system. The next step is data exfiltration.

Empire has a built-in module that allows us to upload data directly to Dropbox. This is very useful in situations in which IP whitelisting is done, as Dropbox is one of the domains that generally allows employee access.

In this recipe, we will learn about data exfiltration using Empire through the Dropbox API.

How to do it...

Let's perform the following steps:

1. Assuming we already have an agent connected to our Empire, we will interact with our agent and run the following command:

usemodule exfiltration/exfil_dropbox

2. To view the details...