Signature-Based Steganalysis and Feature-Augmented Password Cracking for Steganography Tool SteganographX Plus
摘要
Steganography conceals secret data by embedding it within seemingly harmless carriers, while steganalysis detects the presence of hidden information within media. Numerous steganography tools exist, many of which are Windows executables. SteganographX Plus is a freely available, popular, and frequently used tool cited by different authors. This paper investigates the possibility of identifying a signature in the SteganographX Plus. Further, we describe the hiding process employed by the SteganographX Plus. According to the hiding process, we propose an approach, feature-augmented password cracking (FAPC), to reduce brute-force execution time by exploiting features inherent in the hiding process, such as signature, PRNG, etc. The proposed approach significantly reduces password search execution time compared to a general brute-force attack.