OpenSec Atlas

Cloakify: An Open Source Tool for Data Security | OpenSec Atlas

Data Security

Tool

Cloakify

CloakifyFactory transforms any file into a list of innocuous strings using text-based steganography to evade data loss prevention and security monitoring.

View on GitHub

About This Tool

CloakifyFactory - Data Exfiltration & Infiltration In Plain Sight; Convert any filetype into list of everyday strings, using Text-Based Steganography; Evade DLP/MLS Devices, Defeat Data Whitelisting Controls, Social Engineering of Analysts, Evade AV Detection

Primary Use Case

This tool is primarily used for covert data exfiltration and infiltration by converting files into harmless-looking text strings that bypass DLP, MLS devices, and signature-based detection. Security professionals, penetration testers, and red teamers use CloakifyFactory to stealthily transfer data across secure network boundaries without raising alerts.

Key Features

Transforms any file type into lists of everyday strings using text-based steganography
Evades Data Loss Prevention (DLP) and Multi-Level Security (MLS) devices
Defeats data whitelisting controls by encoding payloads as allowed data types (e.g., IP addresses)
Social engineering capability to mislead security analysts during review
Pre-packaged ciphers include themed lists like Pokemon, Top 100 Websites, and distracting bait such as MD5 hashes
Menu-driven Python toolset with standalone scripts for quick deployment
Supports adding noise to degrade frequency analysis attacks
Payloads are Base64-encoded before cloaking

Insights & Recommendations

CloakifyFactory is not a secure encryption tool and is vulnerable to frequency analysis; it is recommended to encrypt sensitive files prior to cloaking. The tool requires Python 2.7.x and may require py2exe packaging for Windows targets without Python installed. Its strength lies in evading detection by transforming data into innocuous text rather than providing cryptographic security.

Installation

Ensure Python 2.7.x is installed
Download or clone the repository from GitHub
Navigate to the directory containing cloakifyFactory.py
Run the tool using the command: python cloakifyFactory.py

Usage

python cloakifyFactory.py

Launches the menu-driven CloakifyFactory tool for cloaking and decloaking files

python cloakify.py -c <inputfile> -o <outputfile> -cipher <ciphername>

Standalone script to cloak (encode) a file using a specified cipher

python decloakify.py -c <inputfile> -o <outputfile> -cipher <ciphername>

Standalone script to decloak (decode) a previously cloaked file using the same cipher

Use 'Add Noise' option in CloakifyFactory

Adds entropy to the cloaked payload to help reduce vulnerability to frequency analysis

Smart Usage Notes

Integrate CloakifyFactory with red team toolkits to simulate advanced data exfiltration scenarios for training blue teams.Use the tool to test and improve DLP and network monitoring rules by generating cloaked payloads that evade existing controls.Leverage social engineering features to train analysts on identifying deceptive data patterns and analyst workflow manipulation.Combine with automated threat hunting platforms to detect anomalous text-based steganography in network traffic or logs.Deploy in purple team exercises to bridge gaps between offensive evasion techniques and defensive detection capabilities.