Stegospolit - Exploit Delivery With Steganography and Polyglots
summary
Claim: browser exploits are fully encoded into image pixels and hidden inside valid JPG/PNG files, then fused with a JavaScript decoder to form an HTML+Image polyglot that a browser can run. The delivered tools (the Stegosploit toolkit v0.3) use iterative encoding to survive JPEG lossiness (converges in ~9 passes with ~45/480,000 remaining bit errors), a 651‑byte decoder rebuilds and executes CVE‑2014‑0282 payloads, demos produce a Meterpreter shell and NT AUTHORITY SYSTEM, and files bypass AV and caching/content‑sniffing defenses.
AI-written summary · about
chapters (50)
- 0:00Intro
- 7:25Exploit
- 8:40Tools
- 9:58How Images Work
- 10:47Images in Layers
- 11:40Image Layers
- 12:51Composite Layers
- 18:31JPEG
- 24:31Decoder Code
- 25:10HTML5 Canvas
- 25:20Decoder
- 26:19Images
- 26:40Polyglots
- 28:08JPEG markers
- 28:21JPEG files
- 28:37Compression
- 29:09HTML Code
- 29:49JavaScript
- 30:36HTML Template
- 31:02Decoder Script
- 31:57New JPEG
- 32:17JPEG Result
- 32:47Preview App
- 33:07JJ Encoding
- 33:40Delivery
- 33:56Close Browser
- 34:27Load Image
- 34:50Open Image
- 36:14Meterpreter
- 36:32Privilege Escalation
- 37:02Authority System
- 37:21Give or Take
- 38:09PNG
- 38:52CC
- 40:17PNG demo
- 41:04Bit layer 0
- 42:30Green Channel
- 42:45Exploit Bit
- 43:15Calculator
- 43:25Browser
- 43:52Demo
- 44:16Exploit Delivery
- 44:57Content Sniffing
- 47:22Data Forensics
- 48:47Detection
- 49:17Where to get it raw
- 50:06Conclusions
- 50:39The Challenge
- 51:17Browsers need to wake up
- 53:29Questions Answers
related talks
30mSecrets in the Pixels! Exploring Steganography
16mBeyond the surface: uncovering hidden threats in online ads
55mHow hacking works
59mBrowsers Gone Wild
49mPDF Attack: A Journey from the Exploit Kit to the Shellcode (Part 1/2)
01h 03mEffects Malware hunting in Cloud environment
51mHow hacking works - Web edition
34mJS Security - A Pentesters Perspective