StegaStamp

StegaStamp: Invisible Hyperlinks in Physical Photographs Project Page CVPR 2020 Matthew Tancik, Ben Mildenhall, Ren Ng University of California, Berkeley Introduction This repository is a code release for the ArXiv report found here. The project explores hiding data in images while maintaining...

openstego

OpenStego OpenStego is a steganography application that provides two functionalities: 1. Data Hiding: It can hide any data within an image file. 2. Watermarking: Watermarking image files with an invisible signature. It can be used to detect unauthorized file copying. Usage For GUI: Use menu...

ST3GG

root@kitploit: ███████╗████████╗██████╗ ██████╗ ██████╗ ██╔════╝╚══██╔══╝╚════██╗██╔════╝ ██╔════╝ ███████╗ ██║ █████╔╝██║ ███╗██║ ███╗ ╚════██║ ██║ ╚═══██╗██║ ██║██║ ██║ ███████║ ██║ ██████╔╝╚██████╔╝╚██████╔╝ ╚══════╝ ╚═╝ ╚═════╝ ╚═════╝ ╚═════╝ ⊰•-•✧ THE ULTIMATE STEGANOGRAPHY TOOLKIT ✧•-•⊱ Hi...

tweetable-polyglot-png

tweetable-polyglot-png Pack up to 3MB of data into a tweetable PNG polyglot file. See it in action here: https://twitter.com/David3141593/status/1371974874856587268 Other image hosts I've verified this technique to work on: Imgur https://i.imgur.com/kNhGrN3.png Github repo thumbnail/header image...

Stegano

Stegano Stegano, un módulo de esteganografía en Python puro. La esteganografía es el arte y la ciencia de escribir mensajes ocultos de tal manera que nadie, aparte del remitente y el destinatario previsto, sospeche de la existencia del mensaje, una forma de seguridad mediante oscuridad. En...

jsteg

jsteg root@kitploit: go get lukechampine.com/jsteg jsteg は、JPEG ファイル内にデータを隠すためのパッケージです。この手法は ステガノグラフィ として知られています。これは、データの各ビットを画像の最下位ビットにコピーすることで実現されます。隠せるデータ量は JPEG のファイルサイズに依存し、隠しデータの 1 バイトあたり約 10～14 バイトの JPEG が必要です。 例 root@kitploit: // open an existing jpeg f, := os.Openfilename img, :=...

steganographer

Steganography in Python This script will hide files inside images and save the modified image to disk The maximum size of file which can be hidden inside an image depends on the dimension of the image. root@kitploit: maxfilesize = heightofimage widthofimage 6 / 8 bytes '100k words.txt' is hidden ...

openstego

OpenStego OpenStego 是一款隐写术应用程序，提供两种功能： 1. 数据隐藏：可以将任何数据隐藏在图像文件中。 2. 水印：使用不可见签名对图像文件进行水印处理。可用于检测未经授权的文件复制。 使用 图形界面： 如果使用安装程序，请使用 OpenStego 的菜单快捷方式。对于 zip 下载，请使用附带的批处理文件或 shell 脚本启动图形界面。 root@kitploit: openstego.bat Windows root@kitploit: ./openstego.sh Linux / MacOS 命令行界面： 请参考在线文档。 开发 Fork...

Chaya

Chaya プライバシーの権利 Chaya は、ステガノグラフィ、暗号技術、圧縮を通じてあなたのプライバシーを保護します。ペイロードを AES-256-GCM 暗号で効果的に暗号化し、 LSB-LPS ステガノグラフィ技術で画像に埋め込み、 FLIF によるロスレス圧縮で検知を回避します。 Chaya はあなたのプライバシーのためのツールです。Chaya は研究に裏打ちされており（公開版のホワイトペーパーは xerohack.com で公開予定）、他の FOSS 画像ステガノグラフィツールと比較して、最も効果的な画像ステガノグラフィツールであることが証明されています。 なぜ Chaya...

steghide

此仓库为只读。 一个 GitHub 组织StegHigh 已成立，用于维护 steghide。请将所有 PR、讨论和问题提交到那里。 此外，StegHigh/steghide 正在寻找维护者。欢迎贡献！ 简介 : Steghide 是一个隐写术程序，能够将数据隐藏在各种图像和音频文件中。颜色频率或采样频率不会被改变，从而使嵌入对一阶统计测试具有抵抗力。 当前 steghide 的版本为 0.5.1 功能: 压缩嵌入数据 加密嵌入数据 嵌入校验和以验证提取数据的完整性 支持 JPEG、BMP、WAV 和 AU 文件 隐写术 :...

zip_smuggling

zipsmuggling 这个 Python 工具能创建在文件结构中嵌入额外数据的 zip 文件。这些额外数据在检查或解压 zip 时不可见/不会显示，但可以通过 zip 文件中的 Windows 快捷方式文件（LNK）使用 powershell 检索。 用法 脚本需要你指定 zip 文件 / 快捷方式文件 / 被夹带文件的名称，以及你想要夹带的文件/数据： python3 zipsmuggle.py importantdata /home/ubuntu/zipsmuggling/testdata.txt 这将在脚本文件夹中生成 importantdata.zip。将此 zip 文件传输...

A Novel APVD Steganography Technique Incorporating Pseudorandom Pixel Selection for Robust Image Security

Steganography is the process of embedding secret information discreetly within a carrier, ensuring secure exchange of confidential data. The Adaptive Pixel Value Differencing APVD steganography method, while effective, encounters certain challenges like the "unused blocks" issue. This problem can...

Joint Data Hiding and Partial Encryption of Compressive Sensed Streams

The paper proposes a method to secure the Compressive Sensing CS streams. It consists in protecting part of the measurements by a secret key and inserting the code into the rest. The secret key is generated via a cryptographically secure pseudo-random number generator CSPRNG and XORed with the...

Code injection

In QUIC in RFC 9000, the Latency Spin Bit specification section 17.4 does not strictly constrain the bit value when the feature is disabled, which might allow remote attackers to construct a covert channel with data represented as changes to the bit value. NOTE: The "Sheridan, S., Keane, A. 2015...

RFC 9000 Security Vulnerabilities

RFC 9000 is a protocol for the fast and secure transmission of data over the Internet. A security vulnerability exists in RFC 9000 that originated to allow a remote attacker to construct a covert channel using data represented as bit-value changes to hide or embed data in seemingly normal network...

Too Log; Didn't Read — Unknown Actor Using CLFS Log Files for Stealth

The Mandiant Advanced Practices team recently discovered a new malware family we have named PRIVATELOG and its installer, STASHLOG. In this post, we will share a novel and especially interesting technique the samples use to hide data, along with detailed analysis of both files that was performed...

Security Researcher Hides ZIP, MP3 Files Inside PNG Files on Twitter

A security researcher has discovered a novel steganography technique for hiding data inside a Portable Network Graphics .PNG image file posted on Twitter, a tactic that could be exploited by threat actors to hide malicious activity. Researcher David Buchanan heralded his discovery on Twitter...

50m-ctf: LFI on Accounting server and RCE on FliteThermostat admin server

Summary: An attacker is able to download local files on the Accounting server due leveraging improper input sanitization in the Invoice PDF generator. In the same fashion an attacker is also able to issue server-side requests on the Accounting server through user-controlled CSS, possibly leading ...

S3QL Replay Attack Vulnerability

S3QL is a file system for storing online data. The system supports Amazon S3, SFTP servers, and more. A security vulnerability exists in the 'checksumbasicmapping' function in S3QL versions prior to 2.27. An attacker can exploit the vulnerability to display an old version of the metadata database...

UBUNTU-CVE-2018-12088

S3QL before 2.27 mishandles checksumming, and consequently allows replay attacks in which an attacker who controls the backend can present old versions of the filesystem metadata database as up-to-date, temporarily inject zero-valued bytes into files, or temporarily hide parts of files. This is...