mirror of
https://github.com/autistic-symposium/sec-pentesting-toolkit.git
synced 2025-04-27 19:16:08 -04:00
84 lines
1.8 KiB
Markdown
84 lines
1.8 KiB
Markdown
# Steganography
|
|
|
|
|
|
|
|
## Images
|
|
|
|
- Adding two images
|
|
- xor_bytes
|
|
- color crypto
|
|
|
|
|
|
|
|
___
|
|
|
|
## Command Line:
|
|
|
|
- Pull out the audio with ffmpeg:
|
|
|
|
```
|
|
$ ffmpeg -i windows.mp4 windows.wav
|
|
```
|
|
|
|
|
|
- Make a gif from video using [ffmpeg](https://www.ffmpeg.org/download.html)
|
|
|
|
```sh
|
|
$ ffmpeg -i windows.mp4 windows.gif
|
|
```
|
|
|
|
- Online tool for images:
|
|
* [utilitymill](http://utilitymill.com/utility/Steganography_Decode)
|
|
* [pngcheck](http://www.libpng.org/pub/png/apps/pngcheck.html)
|
|
* [Paranoid.jar](https://ccrma.stanford.edu/~eberdahl/Projects/Paranoia/)
|
|
|
|
|
|
____
|
|
|
|
### Metadata
|
|
|
|
|
|
[Image metadata](http://regex.info/exif.cgi)
|
|
|
|
- To find information inside a picture, we can use package [pnginfo] or [pngcheck].
|
|
|
|
- If we need [base64 decoding] (for example a PGP key with a picture).
|
|
|
|
- Weird pieces of bytes may need to be XORed.
|
|
|
|
- If we have a decrypted message and a key:
|
|
1. Import the private key to use it to decrypt the message with ```gpg --allow-secret-key-import --import private.key```
|
|
2. Decrypt with ```gpg --decrypt message.pgp```.
|
|
|
|
- [ExifTool](http://www.sno.phy.queensu.ca/~phil/exiftool/index.html)
|
|
|
|
|
|
---
|
|
|
|
## Other Tools
|
|
|
|
- OpenStego
|
|
- OutGuess
|
|
- Gimp
|
|
- Audacity
|
|
- MP3Stego
|
|
- ffmpeg
|
|
- pngcheck
|
|
- StegFS
|
|
- Steghide
|
|
|
|
|
|
|
|
|
|
[Bacon's cipher]:http://en.wikipedia.org/wiki/Bacon's_ciphe
|
|
[Carpenter's Formula]:http://security.cs.pub.ro/hexcellents/wiki/writeups/asis_rsang
|
|
[pngcheck]: http://www.libpng.org/pub/png/apps/pngcheck.html
|
|
[karmadecay]: http://karmadecay.com/
|
|
[tineye]: https://www.tineye.com/
|
|
[images.google.com]: https://images.google.com/?gws_rd=ssl
|
|
[base64 decoding]: http://www.motobit.com/util/base64-decoder-encoder.asp
|
|
[subbrute.py]: https://github.com/SparkleHearts/subbrute
|
|
[pnginfo]: http://www.stillhq.com/pngtools/
|
|
[namechk]: http://namechk.com
|
|
|