jsteg

jsteg root@kitploit: go get lukechampine.com/jsteg jsteg è un pacchetto per nascondere dati all'interno di file jpeg, una tecnica nota come steganografia. Questo viene realizzato copiando ogni bit dei dati nei bit meno significativi dell'immagine. La quantità di dati che può essere nascosta dipen...

openstego

OpenStego OpenStego ist eine Steganographie-Anwendung, die zwei Funktionalitäten bietet: 1. Datenverstecken: Es kann beliebige Daten in einer Bilddatei verstecken. 2. Wasserzeichen: Bilddateien mit einer unsichtbaren Signatur versehen. Es kann verwendet werden, um unbefugtes Kopieren von Dateien ...

Stegano

Stegano Stegano, एक शुद्ध Python स्टेगानोग्राफी मॉड्यूल। स्टेगानोग्राफी छिपे हुए संदेशों को इस प्रकार लिखने की कला और विज्ञान है कि प्रेषक और इच्छित प्राप्तकर्ता के अलावा कोई भी संदेश के अस्तित्व पर संदेह न करे, यह अस्पष्टता के माध्यम से सुरक्षा का एक रूप है। परिणामस्वरूप, Stegano द्वारा प्रदान क...

ST3GG

root@kitploit: ███████╗████████╗██████╗ ██████╗ ██████╗ ██╔════╝╚══██╔══╝╚════██╗██╔════╝ ██╔════╝ ███████╗ ██║ █████╔╝██║ ███╗██║ ███╗ ╚════██║ ██║ ╚═══██╗██║ ██║██║ ██║ ███████║ ██║ ██████╔╝╚██████╔╝╚██████╔╝ ╚══════╝ ╚═╝ ╚═════╝ ╚═════╝ ╚═════╝ ⊰•-•✧ THE ULTIMATE STEGANOGRAPHY TOOLKIT ✧•-•⊱ Hi...

openstego

OpenStego OpenStego is a steganography application that provides two functionalities: 1. Data Hiding: It can hide any data within an image file. 2. Watermarking: Watermarking image files with an invisible signature. It can be used to detect unauthorized file copying. Usage For GUI: Use menu...

StegaStamp

StegaStamp: Collegamenti Ipertestuali Invisibili in Fotografie Fisiche Pagina del Progetto CVPR 2020 Matthew Tancik, Ben Mildenhall, Ren Ng Università della California, Berkeley Introduzione Questo repository è un rilascio del codice per il rapporto ArXiv disponibile qui. Il progetto esplora la...

Chaya

Chaya Diritto alla Privacy Chaya protegge la tua privacy tramite steganografia, crittografia e compressione. Crittografa efficacemente i tuoi payload usando la crittografia AES-256-GCM , li incorpora usando la tecnica di steganografia LSB-LPS nelle immagini e li comprime usando FLIF per eludere i...

steganographer

Steganography in Python This script will hide files inside images and save the modified image to disk The maximum size of file which can be hidden inside an image depends on the dimension of the image. root@kitploit: maxfilesize = heightofimage widthofimage 6 / 8 bytes '100k words.txt' is hidden ...

tweetable-polyglot-png

tweetable-polyglot-png Impacchetta fino a 3 MB di dati in un file PNG poliglotta twittabile. Vedi in azione qui: https://twitter.com/David3141593/status/1371974874856587268 Altri host di immagini su cui ho verificato che questa tecnica funzioni: Imgur https://i.imgur.com/kNhGrN3.png Immagine...

steghide

Questo repository è in sola lettura. Un'organizzazione GitHub,StegHigh, è stata creata per mantenere steghide. Inviate tutte le PR, le discussioni e le segnalazioni qui. Inoltre,StegHigh/steghide è alla ricerca di manutentori. Contribuite! Introduzione : Steghide è un programma di steganografia i...

zip_smuggling

zipsmuggling Questa utility Python crea file zip che contengono dati aggiuntivi incorporati nella struttura del file. Questi dati extra non sono visibili/non vengono mostrati quando lo zip viene esaminato o decompresso, ma possono essere recuperati tramite PowerShell usando un file di collegament...

A Novel APVD Steganography Technique Incorporating Pseudorandom Pixel Selection for Robust Image Security

Steganography is the process of embedding secret information discreetly within a carrier, ensuring secure exchange of confidential data. The Adaptive Pixel Value Differencing APVD steganography method, while effective, encounters certain challenges like the "unused blocks" issue. This problem can...

Joint Data Hiding and Partial Encryption of Compressive Sensed Streams

The paper proposes a method to secure the Compressive Sensing CS streams. It consists in protecting part of the measurements by a secret key and inserting the code into the rest. The secret key is generated via a cryptographically secure pseudo-random number generator CSPRNG and XORed with the...

Code injection

In QUIC in RFC 9000, the Latency Spin Bit specification section 17.4 does not strictly constrain the bit value when the feature is disabled, which might allow remote attackers to construct a covert channel with data represented as changes to the bit value. NOTE: The "Sheridan, S., Keane, A. 2015...

RFC 9000 Security Vulnerabilities

RFC 9000 is a protocol for the fast and secure transmission of data over the Internet. A security vulnerability exists in RFC 9000 that originated to allow a remote attacker to construct a covert channel using data represented as bit-value changes to hide or embed data in seemingly normal network...

Too Log; Didn't Read — Unknown Actor Using CLFS Log Files for Stealth

The Mandiant Advanced Practices team recently discovered a new malware family we have named PRIVATELOG and its installer, STASHLOG. In this post, we will share a novel and especially interesting technique the samples use to hide data, along with detailed analysis of both files that was performed...

Security Researcher Hides ZIP, MP3 Files Inside PNG Files on Twitter

A security researcher has discovered a novel steganography technique for hiding data inside a Portable Network Graphics .PNG image file posted on Twitter, a tactic that could be exploited by threat actors to hide malicious activity. Researcher David Buchanan heralded his discovery on Twitter...

50m-ctf: LFI on Accounting server and RCE on FliteThermostat admin server

Summary: An attacker is able to download local files on the Accounting server due leveraging improper input sanitization in the Invoice PDF generator. In the same fashion an attacker is also able to issue server-side requests on the Accounting server through user-controlled CSS, possibly leading ...

S3QL Replay Attack Vulnerability

S3QL is a file system for storing online data. The system supports Amazon S3, SFTP servers, and more. A security vulnerability exists in the 'checksumbasicmapping' function in S3QL versions prior to 2.27. An attacker can exploit the vulnerability to display an old version of the metadata database...

UBUNTU-CVE-2018-12088

S3QL before 2.27 mishandles checksumming, and consequently allows replay attacks in which an attacker who controls the backend can present old versions of the filesystem metadata database as up-to-date, temporarily inject zero-valued bytes into files, or temporarily hide parts of files. This is...