twr avatar

Cloakify - A Tool to Mask Your Data in Plain Sight

twr

Published: 30 Jul 2019 › Updated: 30 Jul 2019Cloakify - A Tool to Mask Your Data in Plain Sight

Cloakify - A Tool to Mask Your Data in Plain Sight


Cloakify Factory is a tool to transforms any file type into a list of harmless and even useless looking strings. This ability allows for you to hide a data file in plain sight and also transfer it over the network without triggering malware alerts. The functionality which Claokify utilizes is called text-based steganography that protects the data by making it look benign.

The cloaked files defeat signature-based malware detection tools, DLP, etc. In this demonstration, we will be working on Kali Linux.

Downloading Cloakify


It can be downloaded in the Kali Linux with the following command;

git clone https://github.com/TryCatchHCF/Cloakify.git
alt

Once the download completes, make sure you have python2.7 installed as it is a pre-requisite for running it. You need to navigate to its downloaded directory to run it;

Running Cloakify


Let's run the tool by the following command;

python cloakifyFactory.py
alt

So as it seems that Cloakify Factory has a menu-driven tool that leverages its script set. When you choose a file to Cloakify, it first converts it into theBase64-encode, then applies a ciphertext to generate a list that encodes the Base64 payload. And then the cloaked data can be transferred to your desired destination. Let's start cloakifying it the file which contains by data which you can see below;

alt

Now I will encode this data.

alt

alt

Now as the data is encoded, I will check for my output data file which was processed by Cloakify;

alt

As data is encoded, so now it as exfiltrated, choose Decloakify with the same cipher to decode the payload.

alt

alt

Now check for the data, if it reverted to the original state or not.

alt

It worked successfully, as all the data get converted back to the actual state.

What Bunny rating does it get?


Cloakify is an excellent tool to pass the data from the network without being detected and triggering alarms. Both blue and red team activities can use it. I am giving it 4.5 out of 5 bunnies.





alt

Want to learn more about ethical hacking?


We have a networking hacking course that is of a similar level to OSCP, get an exclusive 95% discount HERE

Do you know of another GitHub related hacking tool?


Get in touch with us via the contact form if you would like us to look at any other GitHub ethical hacking tools.

Posted from my blog with SteemPress : https://latesthackingnews.com/2019/07/30/cloakify-a-tool-to-mask-your-data-in-plain-sight/

Leave Cloakify - A Tool to Mask Your Data in Plain Sight to:

Written by

Read more #bestgithubhackingtools posts


Best Posts From twr

We have not curated any of twr's posts yet. But you can encourage our curation team to review posts by visiting them regularly and by referring other readers. Because we give priority to frequently read content.

More Posts From twr