Image
 
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 23 guests and 3 members online
EH-Net Donations

Enter Amount:
$

Google Ads
EH-Net News Feeds
Latest Additions
Book Recommendations





 
Advertisement

You are here: Home arrow Forum arrow Resourcesarrow Toolsarrow how it works???????
Ethical Hacker Community Forums
November 20, 2008, 10:06:56 PM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: ChicagoCon 2-Day Ethical Hacking Conference with MS Blue Hats Oct 31 - Nov 1. Tickets Only $100! www.chicagocon.com/content/view/103/51/
 
   Home   Help Calendar Login Register  
Pages: [1]   Go Down
  Print  
Author Topic: how it works???????  (Read 6896 times)
0 Members and 1 Guest are viewing this topic.
proudindian
Newbie
*
Offline Offline

Posts: 32


View Profile
« on: January 28, 2008, 11:24:13 PM »

hey can anyone please  tell me how the camera shy tool works?Huh?I want a tutorial about it,how it works for steganography?Huh ???Its very interesting Tongue
Logged
BillV
Hero Member
*****
Offline Offline

Posts: 862


View Profile
« Reply #1 on: January 28, 2008, 11:38:11 PM »

I've not done a lot with it, but I believe there's a short introduction to it in the CEH courseware. It basically allows you to see hidden messages by typing in a password. It may have more/other uses, but again, I haven't played much with that tool.
Logged
proudindian
Newbie
*
Offline Offline

Posts: 32


View Profile
« Reply #2 on: January 30, 2008, 01:29:51 AM »

BIllv
Thnx for your rely.I kno any1 can see the hidden mesg I mean there is a process of hideing a messg behind a pic,but can we just use it for hideing programmes behind the gif?Huh?Please help......



Logged
jimbob
Sr. Member
****
Offline Offline

Posts: 307



View Profile WWW
« Reply #3 on: January 30, 2008, 05:33:45 AM »

Some stego programs store binary files in images e.g. word documents. There's no reason you couldn't use them to hide an executable file, although I can't comment on camera shy specifically as I've never used it.

If only text is supported in a tool you can encode binary data in text format using something like uuencode and store the data as text.

Jimbob
Logged
proudindian
Newbie
*
Offline Offline

Posts: 32


View Profile
« Reply #4 on: January 30, 2008, 11:08:34 AM »

jimbob

can you tell me any stego tools which can hide an excutable file behind a pic?Huh
Logged
don
Editor-In-Chief
Administrator
Hero Member
*****
Offline Offline

Posts: 2347


Editor-In-Chief


View Profile WWW
« Reply #5 on: January 30, 2008, 02:50:36 PM »

I haven't used this program, but your post sent me on a little surfing trip and I found this:

Invisible Secrets 4

Check out some of the legit features that one could use for illegit purposes:

Quote
Destroy Files

Deleting files and folders from Windows Explorer is not secure. This will delete only the file's name so that you will no longer see it in Windows Explorer. To destroy files and folder beyond recovery you must overwrite the file/folder before erase. Invisible Secrets 4 provides an integrated Shredder (DoD 5220.22-M compliant) for this operation.

New! Internet Trace Destructor

Internet Traces are information left behind on your computer while you browse the Internet: internet cache, cookies, recently typed URLs, Internet Explorer History and Most Recently Used Documents / Applications.
With Invisible Secrets 4 you can destroy all these traces so that nobody would ever know what did you use the Internet for, and what websites you visited.

New! Cryptboard

The Cryptboard is a new concept in Invisible Secrets 4. While working in Window Explorer (or other shell programs) you can add files to the Cryptboard - which is similar to a basket that contains files. The files are remembered in a list (called Cryptboard), and you can perform various security operations on them in a single step, anytime you want. The Cryptboard is accessible through the context menu, the tray icon, or from the main program.

New! EMail Encryption

Invisible Secrets 4 offers a new function: creation of Self Decrypting Packages. Using this function you can create an executable package with encrypted content. Before encryption the files are compressed. After the package is created you can send it by email. All the receiver needs to decrypt the package at destination is the correct password (no need of special programs), since the package is a program itself.

New! IP-to-IP Password Transfer

In security everything is related to passwords and keys. Once two parties agree on a password they can initiate a secure communication and send encrypted emails or documents. The only problem is to communicate to the recipient the correct key,
without the danger that a hacker might intercept the password during the transfer. This feature allows you to exchange a password between two computers using an encrypted internet line.

New! Application Locker

If you have applications on your computer that you would like to keep only for yourself, or to restrict the access to those applications, the perfect solution for you is the Lock Applications function. Invisible Secrets will encrypt the application. When you want to run a locked application you need to provide the password. Invisible Secrets will decrypt the application and will allow you to run it. After the application is closed, Invisible Secrets re-encrypts it in the background. To quickly open the list of locked application you can define a hot-key, or use the tray menu.

Don
Logged

CISSP, MCSE, CEH, Security+ SME
proudindian
Newbie
*
Offline Offline

Posts: 32


View Profile
« Reply #6 on: February 02, 2008, 07:05:17 AM »

but I heared that we can hide messges behind the picture,but is this possible to hide any executable code behind the pic?Huh
Logged
pseud0
Full Member
***
Offline Offline

Posts: 139



View Profile
« Reply #7 on: February 02, 2008, 10:01:16 AM »

To be clear, you are going to be able to hide the actual data of an executable within a pic (the 1's and 0's) but it is no longer going to be an executable.  The operating system has specific ways to identify any piece of data as being something it can execute, or if it is simply a piece of data that is going to be used by something else.  As soon as you mask the executable file by running it though your stego program you are going to break that link as the OS will not be able to recognize it as being a program.  Until someone on the other end pulls it back out of the stego file it won't be executable again.  Even then, on some OS's you are going to have to do some work to get the file flagged as an executable again.  For example, in *IX operating systems you might have to do a #>chmod +x to get it recognizable again.  With all that being said, there are some special cases where you can make data files act a little like executables (think the windows .jpg hacks that were popular for awhile) but that doesn't seem to be what you're looking for.
Logged

CISSP, CISM
aldoelam
Newbie
*
Offline Offline

Posts: 3


View Profile
« Reply #8 on: August 28, 2008, 02:01:13 AM »

but I heared that we can hide messges behind the picture,but is this possible to hide any executable code behind the pic?Huh

No, you cannot hide an executable inside a picture using steganography. Steganography can only be used to hide text, and encrypted it.

If you want to hide an executable, use a "wrapper" instead.
Logged
oneeyedcarmen
Full Member
***
Offline Offline

Posts: 205

Klaatu, Borada,Necktie?


View Profile
« Reply #9 on: August 29, 2008, 08:42:06 AM »

but I heared that we can hide messges behind the picture,but is this possible to hide any executable code behind the pic?Huh

No, you cannot hide an executable inside a picture using steganography. Steganography can only be used to hide text, and encrypted it.

If you want to hide an executable, use a "wrapper" instead.

Check out the other thread about this topic  And with the GIFAR presentation at BlackHat by Nate McFeters, et al. you'll find that pictures combined with Java will do exactly what you just said cannot be done.

Quote from: Me Smiley
Apparently this garnered some attention at BlackHat this week.  Rich Mogull gave a little write up about it over on Securosis, but I've been seeing a lot of others talking about it, too.
Logged

MCP, Security+, Associate (ISC)2
Pages: [1]   Go Up
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.7 | SMF © 2006-2008, Simple Machines LLC
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.045 seconds with 23 queries.
 
Sponsors

cwnp_moto__120x90.gif

Polls
During the most recent election, I:
 
Support EH-Net


Support EH-Net by
Buying all of your
Amazon items using
the search bar above.

cbtnuggets_logo_125.jpg
Try CBT Nuggets Free!
Recent Forum Topics
Vote For EH-Net

progenic.com
Click here to Vote!

Sadikhov.com
Top IT Cert Sites

binarica.com
Binarica Logo

Add to Technorati Favorites
technorati fave

 
         
Advertisement

© 2008 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.