Awesome Tools for Steganography 🕵️

Para o tutorial em português clique [aqui 🇧🇷]

Table Of Contents

• [Introduction]
• [Hidden with GUI]
• [Hidden with TCP]
• [Low file size]
• [Popular Tool]

Steganography?

Steganography is the art and science of writing hidden messages in such a way that no-one apart from the sender and intended recipient even realizes there is a hidden message.By contrast, cryptography obscures the meaning of a message, but it does not conceal the fact that there is a message. Today, the term steganography includes the concealment of digital information within computer files. For example, the sender might start with an ordinary-looking image file, then adjust the color of every 100th pixel to correspond to a letter in the alphabet—a change so subtle that someone who isn't actively looking for it is unlikely to notice it. The larger the cover message is (in data content terms—number of bits) relative to the hidden message, the easier it is to hide the letter. Stated somewhat more formally, the objective for making steganographic encoding difficult to detect is to ensure that the changes to the carrier (the original signal) due to the injection of the payload (the signal to covertly embed) are visually (and ideally, statistically) negligible; that is to say, the changes are indistinguishable from the noise floor of the carrier. For this reason, digital pictures (which contain large amounts of data) are used to hide messages on the Internet and on other communication media. For example: a 24-bit bitmap will have 8 bits representing each of the three color values (red, green, and blue) at each pixel. If we consider just the blue there will be 28 different values of blue. The difference between 11111111 and 11111110 in the value for blue intensity is likely to be undetectable by the human eye. Therefore, the least significant bit can be used (more or less undetectably) for something else other than color information. If we do it with the green and the red as well we can get one letter of ASCII text for every three pixels.

Stegoshare:

The program uses 3 least significant bits (LSB) for red and blue channels and 2 LSB for the green channel. Using lossless compression (PNG), StegoShare provides about 40% capacity (in the 250Mb images you can hide 100Mb file). Visually images looks that there are no any files embedded, human eye cannot detect the difference. 128-bit encryption makes detecting hidden file more difficult.

Features

Simple and easy to use Works on any platform that runs Java

Running:

apt install wget openjdk-8-jdk openjdk-8-jre
wget http://downloads.sourceforge.net/stegoshare/StegoShare.jar
java -jar StegoShare.jar

On Gentoo:

emerge openjdk
emerge jre
wget http://downloads.sourceforge.net/stegoshare/StegoShare.jar
java -jar StegoShare.jar

Steganoroute:

Is a tool to send steganographed text messages to another computer over the network. The receiver must make a traceroute to the sender using the mtr program (and pressing d once to switch the display mode to the continuous graph). This tool, the sender, creates several fake hops and makes them answer the ICMP packets (or not) to write the letters one by one on the mtr client screen.

Features

It can print upper and lower-case letters.
It can print in normal or color-inverse mode.
It can loop forever.
It should work on your own localhost computer, on your LAN and over the Internet.
Is uses the Sinclair ZX Spectrum (1982) font.
You can select the TTL value on demand and therefore 'move' the text up and down the mtr graph.

Warning! _You can filter the IP address that should receive the traceroute. If you don't filter it, every traceroute coming out of the server will mysteriously add fake hops to any destination!You can feel the sensation of being MITMed by the top intelligence organizations in the world by using the conspiracy mode!

Running:

apt install git mtr python3 python-scapy
git clone https://github.com/stratosphereips/steganoroute.git
cd ./steganoroute
iptables -I INPUT -p icmp --icmp-type 8 -j DROP
python3 ./steganoroute.py -i lo -m "MATRIX has You!" -l
mtr -t yourlocalLANip

*MTR command used to list the message

On Gentoo:

emerge mtr 
emerge python 
emerge scapy
git clone https://github.com/stratosphereips/steganoroute.git
cd ./steganoroute
iptables -I INPUT -p icmp --icmp-type 8 -j DROP
python3 ./steganoroute.py -i lo -m "MATRIX has You!" -l
mtr -t yourlocalLANip

*MTR command used to list the message

Snow:

A lightweight tool that uses whitespace and tabs to hide information inside text files. Unlike other steganographic tools, snow does not rely on binary formats to encode secret data. This can be incredibly useful in cases where it is not possible to share large binary files.

Features

Produces small files Output text can be used on any program that accepts plain text

Running:

apt install stegsnow
stegsnow -C -m "Encrypted Message Here" -p "angrypassword" infile outfile 
stegsnow -C -p "angrypassword" outfile

On Gentoo:

wget https://darkside.com.au/snow/snow.zip
unzip snow.zip
cd snow 
make
cp snow /bin/
snow -C -m "Encrypted Message Here" -p "angrypassword" infile outfile
snow -C -p "angrypassword" outfile

Steghide

Features

Quick and easy to use
Uses checksums to verify the integrity of data

Running:

apt install steghide
cd steghide
steghide embed -ef topsecretfile.txt -cf photo.jpg -sf photoX.jpg
steghide extract –sf photoX.jpg

On Gentoo:

wget https://ufpr.dl.sourceforge.net/project/steghide/steghide/0.5.1/steghide-0.5.1.zip
cd steghide
./configure 
make
make check
make install 
steghide embed -ef topsecretfile.txt -cf photo.jpg -sf photoX.jpg
steghide extract –sf photoX.jpg