SCP for Data Exfiltration on Pentests

A walkthrough on using SCP (Secure Copy Protocol) for data exfiltration during internal penetration tests and red team engagements. The technique leverages SSH's ability to egress through corporate firewalls by setting up SSH key pairs, a reverse SSH tunnel through a cloud VPS, and an SSH config file with named host profiles. Once the tunnel is established, files and directories can be transferred with simple SCP commands, blending into normal administrative traffic on Linux environments.