22 matches found
stegowiper
stegoWiper：一种强大且灵活的攻击工具，用于破坏隐写恶意软件 过去10年中，许多威胁组织都采用了隐写恶意软件或其他基于隐写术的技术来攻击全球各行各业和地区的组织。一些例子包括：APT15/Vixen Panda、APT23/Tropic Trooper、APT29/Cozy Bear、APT32/OceanLotus、APT34/OilRig、APT37/ScarCruft、APT38/Lazarus Group、Duqu Group、Turla、Vawtrack、Powload、Lokibot、Ursnif、IceID等。 我们的研究（参见...
steganographer
Steganography in Python This script will hide files inside images and save the modified image to disk The maximum size of file which can be hidden inside an image depends on the dimension of the image. maxfilesize = heightofimage widthofimage 6 / 8 bytes '100k words.txt' is hidden in...
Chaya
Chaya 隐私权 Chaya 通过隐写术、密码学和压缩技术保护您的隐私。它使用 AES-256-GCM 密码学对您的载荷进行有效加密，利用 LSB-LPS 隐写技术将其嵌入图像，并通过 FLIF 进行无损压缩以逃避检测。 Chaya 为您的隐私而生。Chaya 有研究支撑（我将在 xerohack.com 上发布公开版白皮书），并且已被证明是目前最有效的图像隐写工具，优于其他 FOSS 图像隐写工具。 为什么 Chaya 比其他工具更好？ 使用大多数公开可用的反隐写工具（如 stegexpose 等）检测率为 0% 数据保留率 100%，且与标准 LSB...
pixload
pixload -- 图像载荷创建工具 描述 用于 隐藏后门 创建/注入载荷到图像中的工具集。 当前支持以下图像类型：BMP, GIF, JPG, PNG, WebP。 关于 更深入理解 pixload 及其使用场景的参考资料： 利用多语言JPEG绕过CSP 黑客组织利用多语言图像隐藏恶意广告攻击 在PNG IDAT块中编码Web Shell 通过PNG和古怪的内容类型在Facebook上实现XSS 重温PNG IDAT块中的XSS载荷 如果你想将载荷编码为既是有效的x86 shellcode又是有效的图像文件，建议你查阅 这里 和 这里。 msfvenom...
LSB-Steganography
LSB-Steganography 基于隐写术方法的Python程序，使用最低有效位技术将文件隐藏在图像中。 我使用了最基本的方法，即最低有效位。一个彩色像素由红色、绿色和蓝色组成，每个颜色编码为一个字节。其思想是将信息存储在每一个像素的RGB分量的第一位中。在最坏的情况下，十进制值的差异为1，人眼无法察觉。实际上，如果空间不足以将所有数据存储在每一个像素的第一位中，则应开始使用第二位，以此类推。需要记住的是，在图像中存储的数据越多，就越容易被检测到。 信息...
AmzWord
AmzWord 一个基于CVE-2022-30190，163邮箱后门，以及图片隐写的自动化攻击链实现。 感谢以下github仓库，我们参考并修改了部分代码，集成实现了我们的工作： gdog follina virtual-reality 需求 gdog： Python 2.7 PyCrypto module WMI module Enum34 module Netifaces module follina： Python 3.x 使用&攻击流程 1. 利用follina.py构建恶意word文件，并打开http监听 您可以更改代码中的默认名字和默认ip...
FFTStegPic
FFTStegPic Un script de Python para esteganografía de imágenes digitales utilizando la Transformada Rápida de Fourier. Puede ser útil para algunos retos de esteganografía en CTF...
StegoLab
🕵️ StegoLab – Kit de esteganografía de imágenes todo-en-uno StegoLab es una suite de análisis de esteganografía de imágenes ligera y todo-en-uno, creada para CTFs, retos de ciberseguridad y análisis forense digital. Automatiza el uso de herramientas populares como binwalk, steghide, stegseek,...
Steganography-Online-Codec-JavaScript
SDK de Steganography Online Codec para JavaScript y NPM Steganographic Online Codec te permite ocultar un mensaje cifrado con contraseña dentro de imágenes y fotos utilizando el algoritmo de cifrado AES con una clave derivada de PBKDF2 de 256 bits. Puedes usarlo de forma gratuita en:...
Fake Coding Tests Deliver OtterCookie-Aligned Malware Hidden in SVG Flag Images
North Korean threat actors linked to the Contagious Interview campaign have been observed employing steganography in SVG image files to conceal malicious payloads as part of a campaign using fake job postings and coding challenges. "Any user who ran the project ended up with a four-stage payload...
119 Edge extensions promised useful tools, instead downloaded malware
Microsoft has removed 119 extensions from the Edge add-on store which were all tied to one adware campaign. In a paper titled "Inside StegoAd: How We Disrupted a Massive Malicious Extension Campaign," Microsoft researchers detail how they uncovered and dismantled a sophisticated malware campaign...
PureRAT: A Multi-Stage, Fileless RAT Utilizing Image Steganography and Process Hollowing
PureRAT: A Multi-Stage, Fileless RAT Utilizing Image Steganography and Process Hollowing By Prashanth A N and Mallikarjun Wali · April 20, 2026 PureRAT is an advanced remote access trojan RAT characterized by its complex infection stages. The intrusion sequence is initiated by a malicious .LNK fi...
Robust Provably Secure Image Steganography Via Latent Iterative Optimization
We propose a robust and provably secure image steganography framework based on latent-space iterative optimization. Within this framework, the receiver treats the transmitted image as a fixed reference and iteratively refines a latent variable to minimize the reconstruction error, thereby improvi...
Rethinking Security of Diffusion-Based Generative Steganography
Generative image steganography is a technique that conceals secret messages within generated images, without relying on pre-existing cover images. Recently, a number of diffusion model-based generative image steganography DM-GIS methods have been introduced, which effectively combat traditional...
Rhadamanthys Stealer Evolves: Adds Device Fingerprinting, PNG Steganography Payloads
The threat actor behind Rhadamanthys has also advertised two other tools called Elysium Proxy Bot and Crypt Service on their website, even as the flagship information stealer has been updated to support the ability to collect device and web browser fingerprints, among others. "Rhadamanthys was...
A Technical Review on Comparison and Estimation of Steganographic Tools
Steganography is technique of hiding a data under cover media using different steganography tools. Image steganography is hiding of data Text/Image/Audio/Video under a cover as Image. This review paper presents classification of image steganography and the comparison of various Image steganograph...
GodRAT – New RAT targeting financial institutions
Summary In September 2024, we detected malicious activity targeting financial trading and brokerage firms through the distribution of malicious .scr screen saver files disguised as financial documents via Skype messenger. The threat actor deployed a newly identified Remote Access Trojan RAT named...
TSCL:Multi-Party Loss Balancing Scheme for Deep Learning Image Steganography Based on Curriculum Learning
For deep learning-based image steganography frameworks, in order to ensure the invisibility and recoverability of the information embedding, the loss function usually contains several losses such as embedding loss, recovery loss and steganalysis loss. In previous research works, fixed loss weight...
