CloakifyFactory was developed by Joe Gervais (TryCatchHCF) and was presented at DEF CON 24. This tool hides the data in plain sight—it bypasses Data Loss Prevention (DLP), whitelisting controls, and antivirus detection. Blue team members already know what to look for when hunting for traces of attack in memory or in the network traffic. Cloakify defeats them all by transforming any file type into simple strings using text-based steganography.
In this recipe, we will learn about how to use this tool for data exfiltration.
