cloakify

Encode files into innocuous strings using Cloakify ciphers for data exfiltration.

15|1|Updated Feb 12, 2026
One-click install
npx skills add https://github.com/AeonDave/malskill --skill cloakify
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: cloakify
Source: https://github.com/AeonDave/malskill/tree/main/offensive-tools/data-exfiltration/cloakify
Command: npx skills add https://github.com/AeonDave/malskill --skill cloakify

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill allows for the covert exfiltration of sensitive data by encoding it into seemingly innocuous strings, making it difficult for Data Loss Prevention (DLP) tools to detect.

Core Features & Use Cases

  • Data Encoding/Decoding: Encodes arbitrary files into disguised text formats using various ciphers and decodes them back to their original form.
  • DLP Evasion: Bypasses security measures by disguising exfiltrated data as benign traffic or files.
  • Use Case: Exfiltrate a sensitive configuration file by encoding it as a list of dessert names, which can then be transmitted over a channel that monitors for suspicious file types.

Quick Start

Encode the file 'payload.zip' using the 'desserts' cipher and save the output to 'exfil.txt'.

Frequently Asked Questions about cloakify

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I bypass DLP tools during data exfiltration?

Steganography for data exfiltration encodes arbitrary files into seemingly innocuous text formats, such as lists of dessert names. This mechanism disguises sensitive payloads as benign traffic, effectively evading Data Loss Prevention (DLP) tools that monitor for suspicious file types.

How do I encode a file for covert exfiltration using Python?

To encode a file for covert exfiltration, you apply a cipher from the Cloakify tool to transform the payload into disguised text. For example, you can encode 'payload.zip' using the 'desserts' cipher and save the output to a text file for transmission.

Can I decode disguised strings back to the original file after DLP evasion?

Yes, you can decode disguised strings back to their original file form. The encoding process is reversible, allowing the recipient to apply the corresponding decoding function and retrieve the exact exfiltrated data from the innocuous-looking text output.

Does Cloakify require specific Python versions or external dependencies?

Cloakify requires Python 2 or 3 compatibility and relies on the external Cloakify tool from the TryCatchHCF GitHub repository. You must download and configure this tool before you can begin encoding files for DLP evasion.

What is the best way to exfiltrate a sensitive configuration file covertly?

The best way to exfiltrate a sensitive configuration file covertly is to encode it as benign-looking strings, such as dessert names, using ciphers. This allows the file to be transmitted over monitored channels without triggering DLP alerts for suspicious file types.