Notifications
Clear all

In any file???

13 Posts
5 Users
0 Reactions
1,217 Views
(@wrstrong)
Active Member
Joined: 15 years ago
Posts: 5
Topic starter  

I have successfully used Steganography to hide data in images, audio, video; however, each requires a different app/script to get the job done.

I am wanting to have a one-stop resource for hiding data in any file. (I say any file because all files are binary in nature and if I could find something that would give me the ability to hide and then show a stego in any file, that would make my life 100% easier.)

)

I am trying to find a php solution because I want to make it happen on the fly.

Does this make sense?

If anyone can point me in a direction other than a pdf that says it's possible, that'd be fantastic!

I'm one of those, 'teach me by letting me see how it's done' kind of people. I can't just see the theory written out and then jump in with both feet. (Can't swim THAT well. lol)

Any help you can give me would be greatly appreciated.
Thank you.


   
Quote
(@mscotgrove)
Prominent Member
Joined: 17 years ago
Posts: 940
 

One size fits all??

This will never exist. My knowledge of Stego is very limited but they do rely on making use of unused space, or sometimes pinching data areas that can be reduced in size, eg changing compression ratios to free up space. This different for every type of file.

If one size fitted all, one solution to read would also fit all and so the hidden file would be seen by anyone, and hence no longer hidden.

The only time your proposal could work would be with new Office files which are actually a series of typically XML files zipped together. You maybeable to add an an extra file into the overall zipped file - but this could be spotted easily if looked for.


   
ReplyQuote
Jamie
(@jamie)
Moderator
Joined: 5 years ago
Posts: 1288
 

wrstrong, for what are probably obvious reasons, can you PM me with a bit of background on your interest in this area? Thanks.

Jamie


   
ReplyQuote
(@seanmcl)
Honorable Member
Joined: 19 years ago
Posts: 700
 

I have successfully used Steganography to hide data in images, audio, video; however, each requires a different app/script to get the job done.

Not exactly a surprise. Steganography depends upon the ability to hide data within a normal looking/functioning object such that its presence is not readily detected. Since different objects have different structures and functions, finding a "one size fits all" application would be difficult. It would be more practical to automate the process that you have employed by identifying the type of file that you intend as the carrier and then selecting the appropriate tools. There are technical issues with this, as well, such as the fact that people who know how to do steganography will often take a file and alter it so that it is not, perceptably, different but is larger, in order to be able to embed more data (an exercise in how to do this is left to the reader).

I'd like to have a tool that would parse any log file for any process, OS or system, and tell me what it says. The solution is to determine the number of different and distinct log file formats and then, for each one, create an appropriate parser with which to extract the data.

I am wanting to have a one-stop resource for hiding data in any file. (I say any file because all files are binary in nature and if I could find something that would give me the ability to hide and then show a stego in any file, that would make my life 100% easier.)

Putting aside the question of why such a tool would make your life 100% easier your reasoning is a bit simplistic. The fact that all files can be represented in a binary format is irrelevant just as knowing the chemical makeup of the human body is of little relevance to disease treatment. It is how the binary data are organized that is important and a binary Word document is not terribly similar to an ELF file.

Does this make sense?

I think that the answer is obvious.

I'm one of those, 'teach me by letting me see how it's done' kind of people. I can't just see the theory written out and then jump in with both feet. (Can't swim THAT well. lol)

I'd like to have a mousetrap which is as effective and inexpensive as the traps that practically take your fingers off everytime you set them, but there is a reason why the expression exists.

More often than not, the response to the comment "There must be an easier way to do this!" is "There isn't!"

I'm afraid that this is one of those areas.


   
ReplyQuote
hcso1510
(@hcso1510)
Reputable Member
Joined: 15 years ago
Posts: 303
 

I have already expressed my concerns to the moderator, but I wanted to let the others in the forum know what I am thinking as well. I'm sure many have noted the fact that this is the 1st post for wrstrong. While this individuals intentions may be as pure as the driven snow I see major issues with it. This is your first time out of the gate and you want to know how to hide data?

It seems quite similar to day one in the fire academy and asking how to get away with arson or day one in the police academy and wanting to know how to murder someone and get away with it. Maybe even day one of pre med and asking how to kill someone and get away with it.

The good people on this board make a living doing the best they can to find hidden images, audio, video and other data. This world is littered with broken individuals that use programs to try and surf anonymously and then change file extensions to hide CP and the fruits of other illegal activities.

I'm fairly new myself and have no clout on this board, but I would like to request that no aid or assistance be given in reference to the original request.


   
ReplyQuote
(@wrstrong)
Active Member
Joined: 15 years ago
Posts: 5
Topic starter  

It appears that you might be taking my request for assistance the wrong way.

I have been trying to include information within a file upon download (Similar to the EXIF info in images, only more detailed like userid of the person who downloaded the file, site that they got it from, etc…) This would then follow that file anywhere it goes on the internet. More of thinking of protecting the rights of the original file creation and ownership…. nothing more. I am trying to take care of different file types (images, video, pdf, etc…) and I had the idea that since all files are stored and transmitted in a binary format, couldn't the same process be used to include the necessary information for every binary file?

Please don't question my integrity as I have not given anyone a reason to. My intentions are 100% legit, here.

My original question remains Is there any way to use steganography on any binary file using the same process irregardless of what type the carrier file is? If so, could someone point me in the correct direction?


   
ReplyQuote
Jamie
(@jamie)
Moderator
Joined: 5 years ago
Posts: 1288
 

Please don't question my integrity as I have not given anyone a reason to. My intentions are 100% legit, here.

I can safely say that there's no intention to question your integrity here - we're just looking for clarification of your motivation - but please think for a moment about what you're asking and what most of the people here do for a living (coupled with the fact that you're a new member).

I see that you've just sent me a PM in reply to my previous post (thank you) - I'll reply to that shortly.

Cheers,

Jamie


   
ReplyQuote
(@wrstrong)
Active Member
Joined: 15 years ago
Posts: 5
Topic starter  

To all of the members of this forum, I am not trying to create a new or better class of criminal. What I'm trying to do is to assist the law enforcement community by helping them catch the, 'bad guys'. I don't want to have my question taken the wrong way.

Wouldn't it be easier to stop a crime ring if you KNEW you could track it down to ONE group or individual instead of all offenders? That's what I'm working on, here.

What's the quickest and easiest way to kill a snake? Cut it's head off. The theft of digital media is the snake and the original thief is the head. Track the crime back to them and then deal with them.

There is currently no way to track it back to the original thief. That's what I'm working on.

I have to be careful about how much I say about the subject because the criminals are everywhere and that's why I'm trying to be a little vague about my original question. If you want specifics, please pm me.

Thanks.


   
ReplyQuote
(@seanmcl)
Honorable Member
Joined: 19 years ago
Posts: 700
 

It appears that you might be taking my request for assistance the wrong way.

Starting off the question using Steganography as a descriptor was, perhaps, a poor choice. The word comes from the Greek, steganos="covered" and graphy="writing" or, in other words, a "hidden message."

I have been trying to include information within a file upon download (Similar to the EXIF info in images, only more detailed like userid of the person who downloaded the file, site that they got it from, etc…)

But EXIF data are not hidden. There is a published specification and a number of tools to edit and extract the data. Moreover, programs that manipulate images know how to use/ignore the data for rendering purposes.

This would then follow that file anywhere it goes on the internet. More of thinking of protecting the rights of the original file creation and ownership…. nothing more.

You would do well to research Digital Rights Management which is another way to do what you want, but doesn't involve inserting hidden messages into files. There is a wealth of information on possible ways to implement DRM.

I am trying to take care of different file types (images, video, pdf, etc…) and I had the idea that since all files are stored and transmitted in a binary format, couldn't the same process be used to include the necessary information for every binary file?

The structure of the binary file is determined by the applications that create/manipulate/render it. These may have very rigorous requirements for the organization of information within the file. It is not the case that every binary file has "slack" or useless space in it and for those that do, calculating where these can be used without altering the function or appearance of the data is problematic.

What you propose could be most easily implemented by encapsulating each file in a wrapper prior to transmission. But, again, you have limited ways to protect that file from being unwrapped and sent, without your metadata, without employing a DRM scheme.

My original question remains Is there any way to use steganography on any binary file using the same process irregardless of what type the carrier file is? If so, could someone point me in the correct direction?

The answer is, number 1, "No" and number 2, it is not the right solution to the problem you purport to be solving.


   
ReplyQuote
(@wrstrong)
Active Member
Joined: 15 years ago
Posts: 5
Topic starter  

Thanks for helping me perfect it a bit, Sean! I was using steganography terminology merely because I don't want people to know the information is actually there. Now, I also know that modifying a file's header might also do the same thing, if done the correct way.

I am going to start looking into Digital Rights Management as well.

Again, thanks a bunch!


   
ReplyQuote
Page 1 / 2
Share: