Common sense tells us that if we compromise a system or network, at some point we will probably want to insert or remove data. That data can be large, which means it can take a while to send it over the network. This can be a problem if we only have limited time on the compromised system. Also, moving large files from a network can trigger security defenses such as the Data Loss Prevention (DLP) technology.

There are a multitude of ways to tackle this. Some testers will prefer setting up rsync, FTP, or Server Message Block (SMB) sharing between the Raspberry Pi and Kali to help automatically backhaul data stored in the designated directories. This also allows us to use rate limits or scheduled active times and avoid detection. In the event that this is not possible, or that a manual pull is desired (coordinating with disarming other security measures, and so on) the best path forward may be to compress and break files into smaller sizes to speed up the download/upload process...