Secrets in the Pixels! Exploring Steganography
summary
A French Devoxx talk demonstrates steg techniques for hiding and recovering three flags inside a PNG: using pngcheck to locate a custom chunk that is base64-decoded to get flag1; using OpenStego with LSB steganography to embed/extract a text file (flag2), with minor error correction; and abusing base64 padding (treating "==" as 4 hidden bits) to reconstruct flag3. It also shows practical exfiltration channels: encoding pixels into uploaded video frames (YouTube), leaking data via screen-brightness on air-gapped machines, and hiding JavaScript payloads in image alpha channels for malvertising.
AI-written summary · about
chapters (8)
- 0:00Steganography introduction
- 2:28Historical origins and examples
- 4:14PNG digital steganography
- 7:46Custom PNG chunks
- 10:14LSB pixel hiding
- 13:47Base64 padding secrets
- 18:32Real-world applications
- 24:12Q&A
related talks
13mlo-fi spy: video, steganography, and you
58mStegospolit - Exploit Delivery With Steganography and Polyglots
57mHiding In Plain Sight - Advances In Malware Covert Communication Channels
16mBeyond the surface: uncovering hidden threats in online ads
11mcompilers HATE him: use this ONE WEIRD TRICK to hide a message...!
31mCommSec D1 - Steganography Ante Portas
29mPictures Of You, Pictures Of Me, Crypto Steganography
32mPictures Of You, Pictures Of Me, Crypto Steganography