Home
Calendar
Certifications
Columns
Features
Forum
Resources
Vitals
Latest Additions
Jan 2009 Free Giveaway Sponsor - Black Hat DC
Scooby Doo and the Crypto Caper - Answers and Winners
Daemon - A Contest Revealed
Hacking: The Art of Exploitation 2nd Edition
Nov 2008 Free Giveaway - Winners
Dec 2008 Free Giveaway Sponsor - SANS
Santa Claus is Hacking to Town
Plug-N-Play Network Hacking
Nov 2008 Free Giveaway Sponsor - CWNP
Daemon - A Contest Begins Now
It Happened One Friday - Answers and Winners
Daemon - A Contest
Scooby Doo and the Crypto Caper
MS Blue Hat Hackers Headline Chicago Security Con
The Pen Testing Perfect Storm Webcast Series with Skoudis, Wright, Johnson
EH-Net Login
Welcome Guest.
Username:
Password:
Remember me
Lost Password?
No account yet?
Register
Who's Online
We have 22 guests and 2 members online
EH-Net Donations
Enter Amount:
$
CAD
USD
GBP
AUD
JPY
EUR
Google Ads
EH-Net News Feeds
Latest Additions
Book Recommendations
You are here:
Home
Forum
Resources
Tools
how it works???????
Ethical Hacker Community Forums
January 07, 2009, 07:44:41 PM
Welcome,
Guest
. Please
login
or
register
.
Did you miss your
activation email?
1 Hour
1 Day
1 Week
1 Month
Forever
Login with username, password and session length
News
: ChicagoCon 2-Day Ethical Hacking Conference with MS Blue Hats Oct 31 - Nov 1. Tickets Only $100!
www.chicagocon.com/content/view/103/51/
Home
Help
Calendar
Login
Register
Ethical Hacker Community Forums
>
Resources
>
Tools
(Moderator:
don
) >
how it works???????
Pages: [
1
]
Go Down
« previous
next »
Print
Author
Topic: how it works??????? (Read 8300 times)
0 Members and 1 Guest are viewing this topic.
proudindian
Newbie
Offline
Posts: 32
how it works???????
«
on:
January 28, 2008, 11:24:13 PM »
hey can anyone please tell me how the camera shy tool works?
?I want a tutorial about it,how it works for steganography?
???Its very interesting
Logged
BillV
Hero Member
Offline
Posts: 881
Re: how it works???????
«
Reply #1 on:
January 28, 2008, 11:38:11 PM »
I've not done a lot with it, but I believe there's a short introduction to it in the CEH courseware. It basically allows you to see hidden messages by typing in a password. It may have more/other uses, but again, I haven't played much with that tool.
Logged
proudindian
Newbie
Offline
Posts: 32
Re: how it works???????
«
Reply #2 on:
January 30, 2008, 01:29:51 AM »
BIllv
Thnx for your rely.I kno any1 can see the hidden mesg I mean there is a process of hideing a messg behind a pic,but can we just use it for hideing programmes behind the gif?
?Please help......
Logged
jimbob
Sr. Member
Offline
Posts: 332
Re: how it works???????
«
Reply #3 on:
January 30, 2008, 05:33:45 AM »
Some stego programs store binary files in images e.g. word documents. There's no reason you couldn't use them to hide an executable file, although I can't comment on camera shy specifically as I've never used it.
If only text is supported in a tool you can encode binary data in text format using something like uuencode and store the data as text.
Jimbob
Logged
proudindian
Newbie
Offline
Posts: 32
Re: how it works???????
«
Reply #4 on:
January 30, 2008, 11:08:34 AM »
jimbob
can you tell me any stego tools which can hide an excutable file behind a pic?
Logged
don
Editor-In-Chief
Administrator
Hero Member
Offline
Posts: 2434
Editor-In-Chief
Re: how it works???????
«
Reply #5 on:
January 30, 2008, 02:50:36 PM »
I haven't used this program, but your post sent me on a little surfing trip and I found this:
Invisible Secrets 4
Check out some of the legit features that one could use for illegit purposes:
Quote
Destroy Files
Deleting files and folders from Windows Explorer is not secure. This will delete only the file's name so that you will no longer see it in Windows Explorer. To destroy files and folder beyond recovery you must overwrite the file/folder before erase. Invisible Secrets 4 provides an integrated Shredder (DoD 5220.22-M compliant) for this operation.
New! Internet Trace Destructor
Internet Traces are information left behind on your computer while you browse the Internet: internet cache, cookies, recently typed URLs, Internet Explorer History and Most Recently Used Documents / Applications.
With Invisible Secrets 4 you can destroy all these traces so that nobody would ever know what did you use the Internet for, and what websites you visited.
New! Cryptboard
The Cryptboard is a new concept in Invisible Secrets 4. While working in Window Explorer (or other shell programs) you can add files to the Cryptboard - which is similar to a basket that contains files. The files are remembered in a list (called Cryptboard), and you can perform various security operations on them in a single step, anytime you want. The Cryptboard is accessible through the context menu, the tray icon, or from the main program.
New! EMail Encryption
Invisible Secrets 4 offers a new function: creation of Self Decrypting Packages. Using this function you can create an executable package with encrypted content. Before encryption the files are compressed. After the package is created you can send it by email. All the receiver needs to decrypt the package at destination is the correct password (no need of special programs), since the package is a program itself.
New! IP-to-IP Password Transfer
In security everything is related to passwords and keys. Once two parties agree on a password they can initiate a secure communication and send encrypted emails or documents. The only problem is to communicate to the recipient the correct key,
without the danger that a hacker might intercept the password during the transfer. This feature allows you to exchange a password between two computers using an encrypted internet line.
New! Application Locker
If you have applications on your computer that you would like to keep only for yourself, or to restrict the access to those applications, the perfect solution for you is the Lock Applications function. Invisible Secrets will encrypt the application. When you want to run a locked application you need to provide the password. Invisible Secrets will decrypt the application and will allow you to run it. After the application is closed, Invisible Secrets re-encrypts it in the background. To quickly open the list of locked application you can define a hot-key, or use the tray menu.
Don
Logged
CISSP, MCSE, CEH, Security+ SME
proudindian
Newbie
Offline
Posts: 32
Re: how it works???????
«
Reply #6 on:
February 02, 2008, 07:05:17 AM »
but I heared that we can hide messges behind the picture,but is this possible to hide any executable code behind the pic?
Logged
pseud0
Full Member
Offline
Posts: 154
Re: how it works???????
«
Reply #7 on:
February 02, 2008, 10:01:16 AM »
To be clear, you are going to be able to hide the actual data of an executable within a pic (the 1's and 0's) but it is no longer going to be an executable. The operating system has specific ways to identify any piece of data as being something it can execute, or if it is simply a piece of data that is going to be used by something else. As soon as you mask the executable file by running it though your stego program you are going to break that link as the OS will not be able to recognize it as being a program. Until someone on the other end pulls it back out of the stego file it won't be executable again. Even then, on some OS's you are going to have to do some work to get the file flagged as an executable again. For example, in *IX operating systems you might have to do a #>chmod +x to get it recognizable again. With all that being said, there are some special cases where you can make data files act a little like executables (think the windows .jpg hacks that were popular for awhile) but that doesn't seem to be what you're looking for.
Logged
CISSP, CISM
aldoelam
Newbie
Offline
Posts: 3
Re: how it works???????
«
Reply #8 on:
August 28, 2008, 02:01:13 AM »
Quote from: proudindian on February 02, 2008, 07:05:17 AM
but I heared that we can hide messges behind the picture,but is this possible to hide any executable code behind the pic?
No, you cannot hide an executable inside a picture using steganography. Steganography can only be used to hide text, and encrypted it.
If you want to hide an executable, use a "wrapper" instead.
Logged
oneeyedcarmen
Full Member
Offline
Posts: 205
Klaatu, Borada,Necktie?
Re: how it works???????
«
Reply #9 on:
August 29, 2008, 08:42:06 AM »
Quote from: aldoelam on August 28, 2008, 02:01:13 AM
Quote from: proudindian on February 02, 2008, 07:05:17 AM
but I heared that we can hide messges behind the picture,but is this possible to hide any executable code behind the pic?
No, you cannot hide an executable inside a picture using steganography. Steganography can only be used to hide text, and encrypted it.
If you want to hide an executable, use a "wrapper" instead.
Check out the
other thread about this topic
And with the GIFAR presentation at BlackHat by Nate McFeters, et al. you'll find that pictures combined with Java will do exactly what you just said cannot be done.
Quote from: Me
Apparently this garnered some attention at BlackHat this week. Rich Mogull gave a little
write up about it over on Securosis
, but I've been seeing a lot of others talking about it, too.
Logged
MCP, Security+, Associate (ISC)2
Pages: [
1
]
Go Up
Print
« previous
next »
Jump to:
Please select a destination:
-----------------------------
EH-Net
-----------------------------
=> Special Events
=> Calendar Of Events
===> ChicagoCon 2007
===> ChicagoCon 2008s
===> ChicagoCon 2008f
===> ChicagoCon 2009
=> News Items and General Discussion About EH-Net
-----------------------------
Ethical Hacking Discussions and Related Certifications
-----------------------------
=> Certification
===> The Charter Study Group - Pen Test
=> Network Pen Testing
===> CEH - Certified Ethical Hacker
=====> CEH - Official Course Modules v4
=====> CEH - Official Course Modules v5
=====> CEH - Official Course Modules v6
===> CPTS - Certified Pen Testing Specialist
=====> CPTS - Official Course Modules v5
===> CPTE - Certified Pen Testing Expert
=====> CPTE - Official Course Modules v1
===> ECSA - EC-Council Certified Security Analyst
=====> ECSA - Official Course Modules v1.2
=====> ECSA / LPT - Official Course Modules v3
===> OSCP - Offensive Security Certified Professional
===> GPEN - GIAC Certified Penetration Tester
=> Forensics
===> CCE / MCCE - (Master) Certified Computer Examiner
===> CHFI - Computer Hacking Forensic Investigator
=====> CHFI - Official Course Modules v2
===> EnCE - EnCase® Certified Examiner
=> Incident Response
===> CSIH - Computer Security Incident Handler
===> GCIH - GIAC Certified Incident Handler
=> Hardware
=> Malware
=> Physical Security
=> Programming
=> Social Engineering
=> Web Applications
=> Wireless
===> CWNP Certs
===> GAWN - GIAC Assessing Wireless Networks
===> OSWP - Offensive Security Wireless Professional
=> Other
-----------------------------
Columns
-----------------------------
=> Editor-In-Chief
=> Gates
=> Heffner
=> Hoffman
=> RichM
=> Murray
=> J. Peltier
=> Wilson
-----------------------------
Features
-----------------------------
=> /root
=> Book Reviews
=> Opinions
=> Skillz
===> Examples
===> May 06 - Star Hacks, Episode V: The Empire Hacks Back
===> July 06 - Hack Bill!
===> Sept 06 - Netcat in the Hat
===> Nov 06 - Hitch-Hackers Guide to the Galaxy
===> Dec 06 - A Christmas (Hacking) Story
===> Feb 07 - Charlottes Web Site
===> April 07 - Microsoft Office Space
===> June 07 - Serenity Hack
===> Oct 07 - Worst. Ethical. Hacker. Challenge. Ever.
===> Dec 07 - Frosty the Snow Crash
===> March 2008 - It Happened One Friday
===> Oct 2008 - Scooby Doo and the Crypto Caper
===> Dec 08 - Santa Claus Is Hacking to Town
-----------------------------
Resources
-----------------------------
=> Career Central
===> Looking For Work
===> Looking To Hire
=> Links to cool sites.
=> Mass Media
=> News from the Outside World
=> Tools
=> Tutorials
Loading...
Sponsors
Polls
How many security events including conferences and training do you attend a year:
1 - 2
3 - 4
5 - 6
7+
None - But want to
None - Choose not to
Support EH-Net
Support EH-Net by
Buying all of your
Amazon items using
the search bar above.
Try CBT Nuggets Free!
Recent Forum Topics
Links to cool sites.
: Free Computer Engineering Classes From Stanford
(2) by
shednik
Book Reviews
: Need a book suggestion!
(1) by
BillV
Book Reviews
: [Article]-Mitnick - The Art Of Intrusion: Ch 1 - Hacking The Casinos For A Million Bu...
(4) by
ethicalhack3r
News Items and General Discussion About EH-Net
: [Article]-Jan 2009 Free Giveaway Sponsor - Black Hat DC
(0) by
don
News Items and General Discussion About EH-Net
: EH-Net Milestone - 2 Articles Cross 1 Million Page Views
(3) by
BillV
Other
: What kind of lab, machines you have for your security testing?
(12) by
charlottebandit
Wireless
: Wireless Pen Testing Cards
(5) by
charlottebandit
Oct 2008 - Scooby Doo and the Crypto Caper
: [Article]-Scooby Doo and the Crypto Caper - Answers and Winners
(1) by
vijay2
Oct 2008 - Scooby Doo and the Crypto Caper
: Skillz October 08 Winning Entry - Creative
(0) by
don
Oct 2008 - Scooby Doo and the Crypto Caper
: Skillz October 08 Winning Entry - Technical
(0) by
don
Malware
: Network Virus Problem
(9) by
RoleReversal
Wireless
: WUSB600N good usb ?
(2) by
nap191
News from the Outside World
: Is this acceptable?
(8) by
NickFnord
Other
: FBI code cracking challenge
(3) by
jimbob
Calendar Of Events
: RSA 2009
(0) by
don
Forensics
: Network Forensic tools/practice/techniques
(2) by
jimbob
Malware
: Autoplay when i try to open the drive.
(4) by
jimbob
Physical Security
: Magnetic stripe card spoofing
(4) by
jimbob
Malware
: THe website is Evil but what to do??
(1) by
jimbob
Other
: Insanity?
(3) by
jason
CEH - Certified Ethical Hacker
: CEH is a scam
(14) by
jason
CEH - Certified Ethical Hacker
: Any Practice Environment for learning tool for CEH?
(15) by
don
Wireless
: a petri-dish bridge
(2) by
don
CEH - Certified Ethical Hacker
: TFTP Tranfer time out
(5) by
jason
Tools
: tool to trace users
(8) by
pseud0
Malware
: Malware Challenge 2008 Analysis
(0) by
blackazarro
Programming
: Python 3.0 Released
(0) by
don
Forensics
: SANS SIFT Forensic toolkit
(1) by
don
Links to cool sites.
: Omgili Hacking - Another Search Engine dedicated to Hacking Related Forums
(2) by
RoleReversal
Tools
: Insecure.org's 2006 Top 100 Security Tools List Released
(10) by
shednik
Malware
: Security Forecast for 2009
(4) by
shednik
Other
: Happy New Year!
(8) by
vijay2
CEH - Official Course Modules v6
: Community-built CEH Wiki
(2) by
yehg
Links to cool sites.
: 25C3 25th Chaos Communication Congress
(4) by
alan
Other
: Math Review
(3) by
don
Other
: will this get me anywhere?
(5) by
jason
Physical Security
: Cloning the e-passport
(0) by
jason
Dec 08 - Santa Claus Is Hacking to Town
: [Article]-Santa Claus is Hacking to Town
(10) by
vijay2
Vote For EH-Net
progenic.com
binarica.com
technorati fave
Privacy Notice
for TDCC & All Properties
© 2009 The Ethical Hacker Network
Joomla!
is Free Software released under the GNU/GPL License.