Red Team Consultant @ Google | MS in Cybersecurity @ NYU
● Notice //GitHub (@shehzade) is temporarily suspended pending an automated false-positive review. All tools are hosted on this Code Mirror and available on request (contact); GitHub links will return once reinstated.
repos / contraband
PUBLIC MIRRORGo v1.0

Multi-protocol network egress assessment and DLP verification framework featuring automated L4 sweeps, corporate proxy traversal, and covert protocol smuggling across 20+ channels.

$ git clone https://shehzade.io/repos/contraband.git Copy
Source ZIP (1.93 MB)
Code 174 Commits 1
contraband / docs / wiki
← Root
Abdullah Ansari feat: Contraband v1.0.0 - Multi-Protocol Network Egress Assessment & DLP Forensics Framework
535b3cd 2026-11-08 1 commits
..
Command-Center-HUD.mdfeat: Contraband v1.0.0 - Multi-Protocol Network Egress Assessment & DLP Forensics Framework85 lines · 3.2 KB
Home.mdfeat: Contraband v1.0.0 - Multi-Protocol Network Egress Assessment & DLP Forensics Framework37 lines · 2.5 KB
Installation-and-Build.mdfeat: Contraband v1.0.0 - Multi-Protocol Network Egress Assessment & DLP Forensics Framework69 lines · 2.1 KB
Protocols-Reference.mdfeat: Contraband v1.0.0 - Multi-Protocol Network Egress Assessment & DLP Forensics Framework86 lines · 8.8 KB
Proxy-Traversal-and-Evasion.mdfeat: Contraband v1.0.0 - Multi-Protocol Network Egress Assessment & DLP Forensics Framework81 lines · 3.3 KB
Quickstart-Guide.mdfeat: Contraband v1.0.0 - Multi-Protocol Network Egress Assessment & DLP Forensics Framework185 lines · 5.7 KB
Soak-Testing-and-Benchmarks.mdfeat: Contraband v1.0.0 - Multi-Protocol Network Egress Assessment & DLP Forensics Framework69 lines · 3.1 KB
Synthetic-DLP-Verification.mdfeat: Contraband v1.0.0 - Multi-Protocol Network Egress Assessment & DLP Forensics Framework59 lines · 3.6 KB
Home.mdView File

Contraband Operator Wiki

Welcome to the Contraband technical reference and operator wiki. Contraband is a pure Go (CGO_ENABLED=0) egress assessment engine designed for authorized red teams, purple teams, and network defenders to evaluate perimeter filtering, corporate proxy enforcement, and Data Loss Prevention (DLP) controls.

DIAGRAM // MERMAID
flowchart LR
    Client["Contraband Client<br/>(L4 Sweep + Evasion + DLP)"] --> Proxy["Corporate Proxy / NGFW / CASB<br/>(Direct, PAC, NTLM/Kerberos)"]
    Proxy --> Server["Contraband Server<br/>(Reflection + L7 Listeners)"]
    Server --> Hub["LiveHub Telemetry Engine"]
    Hub --> Dashboard["Web Dashboard (:8080)<br/>(Real-Time SSE + Telemetry)"]
    Client -.->|"--sync-report"| Hub

Wiki Navigation Index

Document Description
Installation and Build Cross-compilation matrix for Linux, macOS, and Windows across AMD64/ARM64.
Quickstart Guide 30-second operational execution guides for standalone and unified binaries.
Protocols Reference Detailed breakdown of all 20+ supported L4, L7, DNS, SMB, Cloud, and Covert egress protocols.
Proxy Traversal and Evasion PAC discovery, NTLM/Kerberos authentication, uTLS fingerprint mimicry, and traffic pacing.
Synthetic DLP Verification Mathematical specifications for Luhn PCI-DSS cards, SSN/NINO/SIN, HL7/FHIR, and cloud API keys.
Command Center HUD Real-time SSE event bus, telemetry metrics schema, zero-CDN web dashboard, and report ingestion.
Soak Testing and Benchmarks 3.18 TB continuous soak test results, memory invariant (<32MB), and hardware sizing guidelines.

Core Operational Invariants

Invariant Specification Guarantee
Runtime Independence Pure Go (CGO_ENABLED=0) Compiles to static single-file binaries with no libc, python, or external library requirements.
Bounded Memory Deterministic <32 MB Heap Streaming iterators and pooled buffers prevent heap exhaustion regardless of transfer size (50 KB to 10 TB).
Port Non-Interference Probe before binding Listeners verify port availability; active system services are skipped without disruption.
Measurement Precision Sub-millisecond timing L4 sweeps, proxy handshakes, and L7 chunk ACKs record duration with millisecond precision (0.00ms).