spread project

advanced covert file distribution

The spread project is doing some research in the field of hidden file distribution. The goal is to serve files for download within environments which do not allow the download of specific files (e.g. executable binaries). This is required within client-based vulnerability assessments or Citrix penetration tests for example.

Besides the discussion of different approaches also an implementation for automated download and conversion is provided. This software shall improve the easyness and efficiency of this kind of security auditing.