Detecting Least Bit Stegonagraphy with Power Shell

BSides MSP 2016

Presented by: Joe Petroske
Date: Saturday June 11, 2016
Time: 15:00 - 15:45
Location: Lecture Hall

Image files make great carrier channels for hidden messages. By simply replacing the least-significant bit of each pixel byte with some data, you wind up with an image file with an embedded hidden file. And the new image is indistinguishable from the original. So how could anyone ever detect this? With a little math and a little Powershell, you can get a good idea whether something else is lurking inside your favorite cat meme.

Joe Petroske


KhanFu - Mobile schedules for INFOSEC conferences.
Mobile interface | Alternate Formats