Questions tagged [steganography]

Steganography is the art of hiding data within other data. Ann sends a message to Bob. With encryption Eve could see the message but not read it. With steganography Eve would not see the message.

Filter by
Sorted by
Tagged with
67
votes
5answers
117k views

Detecting Steganography in images

I recently came across an odd JPEG file: Resolution 400x600 and a filesize of 2.9 MB. I got suspicious and suspected that there is some additional information hidden. I tried some straight forward ...
62
votes
7answers
10k views

Is there an encryption algorithm that allows for a single payload to have two different outputs based on the password?

Suppose I have some confidential information that is encrypted and I'm forced/compelled to disclose that password. My goal is to make that decrypted payload seem meaningful / and the password valid. ...
41
votes
10answers
3k views

Cryptography that looks like ordinary email

I would like to stay out of the automatic filters in place by security agencies and not be accidentally placed on a no-fly list or such. Say I'm having a political debate with a friend about democracy ...
33
votes
8answers
48k views

How is it possible to embed executable code in an image

I was reading up on FireEye and came across this NYTimes article detailing a Skype chat where an image was sent laden with malware: Quote: To gain access to information on the devices..., hackers ...
22
votes
8answers
5k views

Is there such a thing as public key steganography

One of the drawbacks of traditional steganography is that both parties need to exchange a secret key. Encryption had this problem too but circumvented this with public key cryptography. Are there ...
21
votes
4answers
3k views

Would 'spam' mail really avoid eavesdropping?

spammimic.com offers a service that 'encrypts' your mail as 'spam', the rationale being that all mail services automatically filter out spam, and so if you're wanting to communicate with someone ...
16
votes
3answers
6k views

Setup a private VPN for family in China?

I have family in China. During the past weeks their internet connection was severely limited. VPNs such as Astrill and similar weren't working anymore. Is it possible to setup my own VPN (or ...
15
votes
8answers
9k views

Is Steganography a safe method to store secret data?

I want to put some parts of my secret data into specific file with Steganography method. Is this method as safe as other encryption methods like RSA or SHA?
15
votes
6answers
28k views

Steganography to hide text within text

Are there any steganography algorithms which are capable of hiding a (optionally encrypted) text message within another innocuous text message? The scenario I envisage is that I would like to carry ...
15
votes
1answer
3k views

Steganography - JPEGsnoop

I am trying to overcome a CTF steganography challenge. I tried different methods to unhide the hidden data in the file without luck. I used JPEGsnoop on the image and I got this output: *** Decoding ...
14
votes
4answers
2k views

Is Steganography considered encryption and subject to USA export restrictions?

I have written an application for Apple's iOS which embeds messages in JPEG files using steganography (see http://en.wikipedia.org/wiki/Steganography). For the purposes of this question lets assume ...
12
votes
1answer
372 views

A filesystem with chunks hidden all over the internet?

I am wondering if there are any implementations of a filesystem (as in FUSE) that would allow me to host a file in chunks steganographically distributed all over the internet. The way I imagine it, ...
11
votes
9answers
4k views

Can morse code be called steganography? [closed]

Steganography means "hidden writing", where we send messages in hidden ways. Does this mean that something only experts can understand is called steganography?
10
votes
1answer
3k views

Printer Steganography/Watermarking

I am referring to the yellow dots which are printed automatically by laser printers. They encode information such as the time the document is printed as well as the serial number. There appears to be ...
10
votes
1answer
732 views

What cryptosystem makes the encrypted text look like random noise?

Suppose one wants to setup a cryptographic protocol in which 2 parties communicate using an encryption scheme that produces encrypted messages indistinguishable from random data (the desired property) ...
9
votes
6answers
13k views

How can I detect that steganography has been used?

I have seen some of the algorithms which are used to detect if a file is a stego-file or not, but all those algorithms check for specific patterns and are not universal. Maybe there are universal ...
9
votes
2answers
4k views

Best way for a hacker to hide a file on Linux?

Suppose a hacker obtains a shell on my Linux host and wants to hide a file. What's the best way for him to do this? You may assume unprivileged or root access. My thoughts are Use a .file filename ...
8
votes
2answers
3k views

Does this image contain secret data?

I am analysing big, cloud-based application. During analysis I found that one of the biggest files (>3 MB) used in this app is a very small (16x16) icon.png file. Further analysis revealed that the ...
7
votes
8answers
2k views

How easy is it to find a password in a huge text file?

Say that my password is PASSWORD1 I have a 10MB jumbled text file. I hide my password in two parts in the text, between > and < so I can find it myself. Then I put the 2 parts together and add the ...
7
votes
5answers
2k views

Which graphic image formats contain revision history? Does the image editing software being used matter?

It's common knowledge among graphic designers that they can rename a PDF file and import it into Illustrator and access the "layers" within the document, revealing hidden information. I don't know ...
7
votes
3answers
1k views

How to implement reset password for a password manager

How could I best implement a reset password functionality for a password manager? I'm currently saving a hashed + salted master password, which is hashed with PBKDF2, and encrypting the passwords with ...
6
votes
5answers
2k views

Is there any way to write-protect a USB or hide its contents from deletion without hardware modifications?

Data on external storage devices are not secure, I understand that. Despite hardware modifications they can still be hacked etc. However files can be hidden (steganography) or encrypted. I'm ...
6
votes
2answers
850 views

What is network steganography?

I am new very new to networking concepts I do not have any idea about network steganography. Can anyone please explain what it is. what is its advantages and disadvantages?
6
votes
1answer
961 views

Distinguishing SSH and HTTPS traffic

Alice is an employee of Chris, and Chris does heavy traffic monitoring via its company proxy. Alice wishes to use a Bob's web service while preserving privacy and confidentiality. She has full ...
6
votes
3answers
2k views

Image steganography and tracking

We are running an online-press media-library. On this site many brands are uploading images and track press users download and views per image. But some brand now want to add unique code in image so ...
6
votes
1answer
143 views

What tools are needed to view or detect covert messages in a 60 fps video?

The eye can't detect changes in a frame greater than 60 FPS. Similar to this scene in Fight Club, a QR code equivalent is used in pairing the Apple Watch with the iPhone Without knowing that the ...
6
votes
1answer
396 views

Are NTFS Alternate File Streams considered a security risk in your organisation; how is it mitigated?

Alternate File Streams allows a user to embed hidden content within any NTFS file. That file can be a TXT file, or MOV for example. Some may consider this a form of steganography, and therefore the ...
5
votes
1answer
643 views

Approaching a steganalysis challenge

I am currently doing one of the Honeynet.org challenges, specifically the 13th forensic challenge dealing with steganography. Several PNGs have been provided and participants are to find and extract ...
4
votes
2answers
4k views

How to determine if JPG EXIF data has been changed by “OEM” software (without third party tools)?

I have a JPG and I am analyzing it to determine it's efficacy. The image metadata clearly indicates that the image was digitized at 15:10:13, Dec 31, 2015 and I need to determine if this date ...
4
votes
2answers
276 views

What happens if a pro-censor ISP has Telex key(s)?

I've been watching more and more people jump on the idea of Telex as a way to prevent internet censorship (e.g. http://www.technologyreview.com/communications/38207/ -- not my comments at the bottom ...
4
votes
2answers
1k views

Hidden digital watermark in a website which can survive .jpg screenshots?

I'm trying to embed a secret watermark in a website so that I can link any screenshots to the user who created them. The page looks something like this: It has a custom background (user can change it ...
4
votes
1answer
1k views

Defeating identifying information that printers hide in printed documents

It's pretty widely known (well, I think it's widely known) that printer manufacturers, in cooperation with certain governments, embed various bits of information (serial numbers, dates, etc.) in ...
4
votes
2answers
224 views

How can I verifiably demonstrate that steganography or hidden partitions do not exist?

I want to verifiably demonstrate that there are no hidden partitions, or hidden messages in a given message. In this scenario, assume the subject is being monitored (consensually) and agrees to align ...
3
votes
5answers
1k views

TrueCrypt dataleaks that might betray the “Deniable File System” option

Reading into "Operation Satyagraha", one would have to believe give all the resources used that the investigators had some reason to believe there was data to decrypt, even though in theory and in ...
3
votes
1answer
321 views

Do digital camera perform steganography / watermarking?

It is well documented that one should consider that all modern printers perform steganography / watermarking in the back of their users https://en.m.wikipedia.org/wiki/Printer_steganography Is such ...
3
votes
1answer
10k views

What to do with output files from binwalk? [closed]

I am testing my steganography skills on www.root-me.org. I downloaded a challenge. Here is the challenge image file. I used binwalk and it showed me the following: root@kst-Inspiron-5458:/home/kst/...
3
votes
2answers
5k views

Uncover data in file slack

Today in class we learned about how information can be uncovered in a file slack. I understand this theoretically, given the physical and logical file size I can come up with the slack space of a file....
3
votes
1answer
123 views

Protect hidden message in image from manipulations

I understand that there are techniques that allows me to hide information in an image. In particular, I am interested in what ways I can save a relatively short string in an image, say 30-40 ...
3
votes
2answers
170 views

steganography - digital application?

Recently I participated in a CTF game which held a number of steganography challenges. This got me really interested in steganography. From what I understand steganography is most commonly used with ...
3
votes
2answers
522 views

Is it possible to revert a steganographic process to reconstruct the original image?

Using, say, outguess, it is possible to hide a secret message inside a JPEG image (LSB method). Is it possible to undo the steganographic process given the modified image to reconstruct the original ...
3
votes
2answers
318 views

Openstego LSB Plugin

I ran the openstego command line below and got the error "No plugin found with name: lsb". I googled for this error and it said "abstract class should be added." I am not good at java but I want to ...
3
votes
0answers
111 views

Putting hidden DRM into PNG images to track copyright infringement [duplicate]

There was a question like this, but it was about JPG pictures. I have the same one about PNG pictures. I've recently had trouble where someone stole an artwork of mine and put it as a YouTube avatar. ...
2
votes
2answers
106 views

VCS to manipulate returned trees to prevent leaks? [closed]

I am wondering if there is any system that would change source code trees in subtle from version control systems in ways that are hard to discover (i.e. whitespaces at the ends of lines, perhaps even ...
2
votes
1answer
353 views

Encrypted data embedded in JPG and Other file types

This is some data found near the end of a JPG file: 18{8uck3y3$} ! 18{b4063c521f76545d8c94e999dd63f445d8c01cfc} # 18{U2FsdGVkX19RJjdBbDB51ok1hkFXaB91NpZNoQjbVXYlMeMTaWRTdg==}? Other files on the ...
2
votes
2answers
773 views

How can I detect unencrypted self-executing code in JPEG images?

Assuming that I have an infected image containing a self-executing malicious code that targets my image viewer and executes when I open the file. Supposing also that my computer is completely clean ...
2
votes
1answer
271 views

Editing images containing hidden information

Suppose we have an image with some hidden info behind it. If we open it in a photo manipulation software like Photoshop or Gimp, without editing it and just save it as a new image, does the image ...
2
votes
1answer
109 views

Steganography in MP3s

Is there a way to hide a message in an audio file and hear it by playing it in reverse? Like if you play the audio file forward, it will skip my secret message and just play the next frame, but is ...
2
votes
1answer
148 views

Masking traffic in another protocol

I remember reading a couple of years ago (I believe it was during the Egyptian Revolution) that hackers managed to bypass government filters by making their traffic appear as another protocol. If ...
2
votes
1answer
423 views

How to Combine RSA and AES for Steganography Project [closed]

I wanted to have some knowledge about cryptography and steganography so I decided to write a steganography application with using LSB technique and for message encryption I wanted to combine RSA and ...
2
votes
2answers
105 views

Can a picturefile with stegano be malware when saved somewhere?

I was reading an article about malware active in ad-banners, limited to systems with IE-browsers with some settings. Millions exposed to malvertising that hid attack code in banner pixels ...