Steganography

[rudeboy]

Can anyone suggest any good tools to:
1. hide information in plain sight via jpg, web form, other media
2. detect steganographically encoded information in above media

[nikkelitous]

There is a REALLY good site listing a ton of good Steganographic utilities for all OSes. REALLY good to check out. MUST SEE!!!

http://members.tripod.com/steganography/stego.html

[rudeboy]

Thanks. I can't wait to start tearing through this stuff. Personally I have had dreams of developing text based steganography using stories and correspondence threads that seem applicable and relevant. Not just via pictures or junk in other protocols.

[Grifter]

There are people out there playing with text based stego. One of the more well known being www.spammimic.com. You should check that out, it's pretty slick. It's only downfall is the fact that you have to use it on site. If they could release this as a binary I think a lot more people would use it. After all, who knows if they monitor what you stego.

[rudeboy]

That's neat. But I do want to create a binary that generates non-spam. That way there is not a chance of rejection or deletion by the user. I'll look at this as one of the models for text-stego.

Thanks Grifter

[Teep]

hmmm... apparently Spammimic uses some mimic engine by Peter Wayner... I dunno what they do exactly, but the encoded message gets quite long... so they might use some simple kind of encryption and then have a predefined sentence for each character of the encrypted message. The individual sentences make sense, but there doesn't seem to be any logical relationship between one sentence and the next... ofcourse, it being a spam-message, nobody will find it suspicious that the sentences don't relate to eachother.

The obvious problem is that it'll probably get caught by a lot of spam-filters as most of the known buzz-words are there

Apparently Peter Wayner built a similar mimic engine that generates a baseball commentary. I haven't seen any examples but again this is a text-form in which non-relating sentences wouldn't rouse suspicion.

Anyway, it would be trivial to write a program that does this, I think...

[l0wkey]

try this out

http://packetstormsecurity.org/crypt.../DOS/texto.zip