nerdexam
GIAC

GSLC · Question #104

GSLC Question #104: Real Exam Question with Answer & Explanation

The correct answer is B. Snow.exe. Snow.exe is a whitespace steganography tool that hides secret messages within text files by encoding data as invisible combinations of spaces and tabs appended to lines of text.

Question

Which of the following tools is used to hide secret data in text files and is based on the concept that spaces and tabs are generally not visible in text viewers and therefore a message can be effectively hidden without affecting the text's visual representation for the casual observer?

Options

  • ASARA
  • BSnow.exe
  • CFpipe
  • DImage hide

Explanation

Snow.exe is a whitespace steganography tool that hides secret messages within text files by encoding data as invisible combinations of spaces and tabs appended to lines of text.

Common mistakes.

  • A. SARA (Security Auditor's Research Assistant) is a network vulnerability scanning and security assessment tool, not a steganography utility for hiding data in files.
  • C. Fpipe is a TCP port forwarder and redirector used for tunneling or relaying network connections, and has no functionality for hiding data within text files.
  • D. Image hide is a steganography tool designed to conceal data within image files using techniques like LSB substitution, not within text files using whitespace characters.

Concept tested. Text-based whitespace steganography with Snow.exe

Reference. http://www.darkside.com.au/snow/

Community Discussion

No community discussion yet for this question.

Full GSLC Practice