Steganography on Windows

The fear of every surveillance society: citizens protecting their own privacy with strong cryptography

Steganography on Windows

Post by Heatnix on Sat Oct 29, 2011 6:56 pm
([msg=62681]see Steganography on Windows[/msg])

Hello. I have a question. When Windows blends a .rar with a .jpg, how is the image changed? Ergo, what is process that allows such operation? I am asking because I am interested in replicating such a feat with a program of my own.
Heatnix
New User
New User
 
Posts: 6
Joined: Thu May 21, 2009 2:42 pm
Blog: View Blog (0)


Re: Steganography on Windows

Post by mShred on Sat Oct 29, 2011 7:54 pm
([msg=62683]see Re: Steganography on Windows[/msg])

Not sure what you mean.. Do you mean compressing it into a .rar file?
Image

For those about to rock.
User avatar
mShred
Administrator
Administrator
 
Posts: 1612
Joined: Tue Jun 22, 2010 4:22 pm
Blog: View Blog (2)


Re: Steganography on Windows

Post by Heatnix on Sat Oct 29, 2011 8:03 pm
([msg=62684]see Re: Steganography on Windows[/msg])

I mean when you do this:

http://www.computerhope.com/issues/ch000861.htm

How does windows change the image? How does it convert into an image that still works?
Heatnix
New User
New User
 
Posts: 6
Joined: Thu May 21, 2009 2:42 pm
Blog: View Blog (0)


Re: Steganography on Windows

Post by tucak on Sun Oct 30, 2011 1:44 pm
([msg=62693]see Re: Steganography on Windows[/msg])

I think you just append the .rar to the end of the .jpg.
tucak
New User
New User
 
Posts: 47
Joined: Wed Jun 04, 2008 12:20 pm
Blog: View Blog (0)


Re: Steganography on Windows

Post by VPR3 on Mon Oct 31, 2011 7:40 pm
([msg=62723]see Re: Steganography on Windows[/msg])

Your not really changing the image, your just hiding your secret data in the image data. Basically what is happening is the data your wanting to hide is being hidden in the least significant bit of the image data. To the windows program that is just viewing the image, the hidden data will be background noise that has no effect on how a windows program converts or interprets the image itself.
VPR3
Poster
Poster
 
Posts: 161
Joined: Fri Apr 22, 2011 11:35 am
Blog: View Blog (0)


Re: Steganography on Windows

Post by pertti123 on Tue Nov 01, 2011 12:53 pm
([msg=62729]see Re: Steganography on Windows[/msg])

VPR3 wrote:Your not really changing the image, your just hiding your secret data in the image data. Basically what is happening is the data your wanting to hide is being hidden in the least significant bit of the image data. To the windows program that is just viewing the image, the hidden data will be background noise that has no effect on how a windows program converts or interprets the image itself.


That's one way to implement steganography, but the technique you're describing isn't used in this case. This is much more simpler technique.

This just seems to be appending the compressed(doesn't have to be compressed) file after the image.

Code: Select all
$ hexdump.exe -C bla.rar
00000000  52 61 72 21 1a 07 00 cf  90 73 00 00 0d 00 00 00  |Rar!.....s......|
00000010  00 00 00 00 91 80 74 20  90 2c 00 08 00 00 00 08  |......t .,......|
00000020  00 00 00 02 54 24 33 7e  a4 9b 61 3f 1d 30 07 00  |....T$3~..a?.0..|
00000030  20 00 00 00 62 6c 61 2e  74 78 74 00 f0 bc f4 5d  | ...bla.txt....]|
00000040  62 6c 61 0a 62 6c 61 0a  c4 3d 7b 00 40 07 00     |bla.bla..={.@..|
0000004f
$ hexdump.exe -C hidden.jpg | tail
000115e0  13 92 e3 56 ea 69 f7 60  67 44 b7 e9 c7 df 1b 4f  |...V.i.`gD.....O|
000115f0  87 1e ab 5a 34 1b 8c 6d  84 b1 c4 72 6f 8a d3 7a  |...Z4..m...ro..z|
00011600  62 cb 84 53 54 4f 6c 77  50 22 ef dd 8a f4 ae 1d  |b..STOlwP"......|
00011610  d8 fa 43 ff d9 52 61 72  21 1a 07 00 cf 90 73 00  |..C..Rar!.....s.|
00011620  00 0d 00 00 00 00 00 00  00 91 80 74 20 90 2c 00  |...........t .,.|
00011630  08 00 00 00 08 00 00 00  02 54 24 33 7e a4 9b 61  |.........T$3~..a|
00011640  3f 1d 30 07 00 20 00 00  00 62 6c 61 2e 74 78 74  |?.0.. ...bla.txt|
00011650  00 f0 bc f4 5d 62 6c 61  0a 62 6c 61 0a c4 3d 7b  |....]bla.bla..={|
00011660  00 40 07 00                                       |.@..|
00011664


Edit: Oops, I skipped tucak's post.
pertti123
New User
New User
 
Posts: 13
Joined: Fri Sep 10, 2010 6:02 am
Blog: View Blog (0)



Return to Crypto

Who is online

Users browsing this forum: No registered users and 0 guests