nerdexam
GIAC

GCIH · Question #265

Website and stolen the bank account information of its users and their credit card numbers by using the SQL injection attack. Now, John wants to sell this information to malicious person Mark and…

The correct answer is C. Snow.exe. Snow.exe is a steganography tool that conceals data in plain ASCII text by appending whitespace characters (spaces and tabs) to the ends of lines, and optionally encrypts the hidden payload using the IDEA algorithm. This matches exactly the technique described in the question.

Web Application Attacks & Post-Exploitation

Question

Website and stolen the bank account information of its users and their credit card numbers by using the SQL injection attack. Now, John wants to sell this information to malicious person Mark and make a deal to get a good amount of money. Since, he does not want to send the hacked information in the clear text format to Mark; he decides to send information in hidden text. For this, he takes a steganography tool and hides the information in ASCII text by appending whitespace to the end of lines and encrypts the hidden information by using the IDEA encryption algorithm. Which of the following tools is John using for steganography?

Options

  • AImage Hide
  • B2Mosaic
  • CSnow.exe
  • DNetcat

How the community answered

(34 responses)
  • A
    3% (1)
  • C
    94% (32)
  • D
    3% (1)

Why each option

Snow.exe is a steganography tool that conceals data in plain ASCII text by appending whitespace characters (spaces and tabs) to the ends of lines, and optionally encrypts the hidden payload using the IDEA algorithm. This matches exactly the technique described in the question.

AImage Hide

Image Hide is an image-based steganography tool that conceals data within pixel values of image files, not in ASCII text whitespace.

B2Mosaic

2Mosaic is a visual steganography tool that hides data within images or mosaics, not within ASCII text using whitespace encoding.

CSnow.exeCorrect

Snow.exe (Steganographic Nature Of Whitespace) specifically hides information by encoding it as whitespace - combinations of spaces and tabs appended to line endings in ASCII text files. It supports the IDEA (International Data Encryption Algorithm) cipher to encrypt the hidden payload before embedding it, matching both distinguishing characteristics stated in the question. No other common steganography tool combines whitespace-based ASCII text hiding with IDEA encryption in this manner.

DNetcat

Netcat is a general-purpose network utility for transferring data over TCP/UDP connections and has no steganographic capability.

Concept tested: Whitespace steganography using Snow.exe with IDEA encryption

Topics

#steganography#Snow.exe#data exfiltration#whitespace encoding

Community Discussion

No community discussion yet for this question.

Full GCIH Practice