Egress Filtering Weakness

Use in an authorized assessment to check whether permissive egress rules allow an outbound SFTP/SSH upload on a configured TCP port. The procedure creates a password-protected AES-256 ZIP from designated staged data, then uploads it to an authorized SFTP server using a batch file. SFTP remains SSH regardless of port: using a port commonly associated with HTTP(S) or DNS does not make the traffic that protocol and does not guarantee that a restrictive egress policy will permit it.