Exfiltration

Adversarial transforms that leak data through covert channels, including allow-list-resistant exfiltration techniques.

Module: dreadnode.transforms.exfiltration

Data exfiltration techniques through covert channels.

Transform	Description
`markdown_image_exfil`	Encode data in markdown image URLs
`mermaid_diagram_exfil`	Hide data in Mermaid diagram rendering
`unicode_tag_exfil`	Encode data in invisible Unicode tags
`dns_exfil_injection`	Exfiltrate via DNS query strings
`ssrf_via_tools`	Server-side request forgery through tool interfaces
`link_unfurling_exfil`	Exploit link preview bots for exfiltration
`api_endpoint_abuse`	Abuse legitimate APIs as exfiltration channels
`character_exfiltration`	Extract data character by character
`search_query_exfil`	Exfiltrate data through the agent’s web-search tool
`trusted_domain_image_exfil`	Markdown-image exfil routed through an allow-listed domain

Advanced exfiltration

Module: dreadnode.transforms.exfil_advanced

Exfiltration that survives URL allow-lists and content filters. Pair with the trusted_proxy_exfil_detected and covert_channel_capacity scorers.

Transform	Description
`trusted_proxy_char_exfil`	Leak a secret one character at a time through an allow-listed proxy (CamoLeak/AgentFlayer/EchoLeak)
`tool_arg_covert_channel`	Encode data in the pattern of legitimate tool use (presence / size / selection)

See Transforms for how to apply transforms with any attack.