Hacking Articles Tips Tricks Videos Tutorials

KitPloit - PenTest Tools!
Chaya - Advance Image Steganography

https://blogger.googleusercontent.com/img/a/AVvXsEgfcqi3Fj6Ni2yqRwiJh-CIurylVijY5j6x7nkrTlZqqLEF3QN-n2oqW-4Vk5tBMfJr4sOMofJNN1YJxuDLA4yU2sLJSjNLw8Uv-ALgZ8A1pKwBHst3016sz1zr_hNRDTmlKobqHVR-b-zE8WAL9tGvD-lR0CJJv-EaqM1qSqoE9A6FB8GPC-gmu_fU=w354-h400 Chaya protects your privacy through steganography, cryptography and compression. It effectively encrypts your payloads using AES-256-GCM cryptography, embeds them using LSB-LPS steganography technique into images and compresses them using FLIF to evade detection by performing lossless compression.

Chaya is for your privacy. Chaya is backed by research (I will publish public version whitepaper on xerohack.com), and has proven to be by far the most effective image steganography tool as compared to other FOSS image steganography tools.
WHY CHAYA IS BETTER THAN THE REST?

* 0% detection rate using most of the publically available anti-steg tools like stegexpose and many more
* 100% data retention with almost the same capacity of standard LSB technique with LBS-LPS
* Transparent cryptography that gets as good as python has to offer

There is no way this can be broken using a standard supercomputer unless there are exploits in python libs and python itself.. LSB-LPS will take exponetially large time to brute-force with larger graph images because you will have to attack every X,Y coordinates combo without any error. Making an ML to do so is also quite useless and can be only used for Natural language processing for example: which message is readable to find the coordinates. AFTER THAT, you have to break the encryption. MOREOVER, NLP ML cannot find the coordinates because the bruteforce results will be ciphertext anyway. If for some reason the attacker knows the coordinates to start the de-steg process, they will have to break AES-GCM-256. GCM is better because it offers integrity along with co nfidentiality, which is why it's the better AES mode). United Nations Declaration of Human Rights (UDHR) 1948, Article 12 - “No one shall be subjected to arbitrary interference with his privacy, family, home or correspondence, nor to attacks upon his honor and reputation. Everyone has the right to the protection of the law against such interference or attacks.” International Covenant on Civil and Political Rights (ICCPR) 1966, Article 1 - "No one shall be subjected to arbitrary or unlawful interference with his privacy, family, home or correspondence, nor to unlawful attacks on his honor or reputation. Everyone has the right to the protection of the law against such interference or attacks." Features v1.2https://blogger.googleusercontent.com/img/a/AVvXsEgokX9skaOJoxMejblQ-h4RZkj9ADTNQfkNmC-63j_mUPlwsBklZcMYhykVSZWD2H_yvpDynWzKAgCxT7WW4wNYnbTdVw3m0z0vkA3Ea3LFi6cmxB1Lxu-Hcsck1IXSI-I48ewg65WfNlJuyP2llAh1R47GTAlbRGjdst6wBU9GqwM8l2cmcdoAkX68=w640-h478 * Supports AES-256-GCM cryptography
* Supports Standard LSB steganography
* Supports LSB-LPS steganography
* Supports FLIF lossless compression
* Cipher data logs as json
* Analytics support for your experiments
* Supports json to csv conversions
* Highly verbose cipher data logs
* Workspace Cleaner
* Easy installer for initial setup
* Comes with easy updater ChangelogsChangelog (main channel): https://github.com/xerohackcom/Chaya/blob/main/CHANGELOG.md Changelog (dev channel): https://github.com/xerohackcom/Chaya/blob/dev/CHANGELOG.md InstallationOne Line SetupUse the following command for faster setup:

Command For Ubuntu Based Distros

sudo apt install python3-pip && sudo apt install git && git clone --depth=1 https://github.com/xerohackcom/Chaya.git && cd Chaya && pip3 install -r requirements.txt && sudo apt update && sudo apt-add-repository ppa:linuxuprising/libpng12 && sudo apt update && sudo apt install -y libpng12-0

Command[...]

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest & Hacking Tools

Chaya - Advance Image Steganography

4 viewsedited 20:34

Hacking Articles Tips Tricks Videos Tutorials

KitPloit - PenTest Tools! Chaya - Advance Image Steganography https://blogger.googleusercontent.com/img/a/AVvXsEgfcqi3Fj6Ni2yqRwiJh-CIurylVijY5j6x7nkrTlZqqLEF3QN-n2oqW-4Vk5tBMfJr4sOMofJNN1YJxuDLA4yU2sLJSjNLw8Uv-ALgZ8A1pKwBHst3016sz1zr_hNRDTmlKobqHVR-b-zE8WAL9tGvD…

For Debian Based Distros

sudo apt install python3-pip && sudo apt install git && git clone --depth=1 https://github.com/xerohackcom/Chaya.git && cd Chaya && pip3 install -r requirements.txt && sudo apt update && sudo apt install build-essential devscripts && cd ~/ && sudo touch /etc/apt/sources.list.d/libpng12.list && echo "deb https://ppa.launchpadcontent.net/linuxuprising/libpng12/ubuntu hirsute main" | sudo tee -a /etc/apt/sources.list.d/libpng12.list && echo "deb-src https://ppa.launchpadcontent.net/linuxuprising/libpng12/ubuntu hirsute main" | sudo tee -a /etc/apt/sources.list.d/libpng12.list && sudo apt-key adv --keyserver hkp://keyserver.ubuntu.com:80 --recv-keys 1CC3D16E460A94EE17FE581CEA8CACC073C3DB2A && sudo apt update && sudo apt install -y libpng12-0

Using Installer.pyYou can install the dependencies using installer.py script. Run the following commands in terminal:

sudo apt install python3-pip && sudo apt install git && git clone --depth=1 https://github.com/xerohackcom/Chaya.git && cd Chaya

Ubuntu Based Distros python3 installer.py --ubuntuDebian Based Distros python3 installer.py --debianUsageHelp Menupython3 chaya.py --helpAutomatic Operations* First add few images (png format) to /autoexp/image_raw/
* Remove the txt file from all autoexp sub-folders to avoid errors!
* Run the following command python3 chaya.py -encOutput Data* Enc + Steg images -> /autoexp/image_steg/
* Enc + Steg + Comp images -> /autoexp/image_steg_comp/
* Cipher data -> /appdata/cipher_data.json
* Analysis data -> /appdata/analysis_results_enc.json Issues - v1.2.3* Issue with numpy import (solution under issues)
* Known bug with image-quality library (not fixed) Future PlanThe plan is to build this into a modular framework where users can also add their custom scripts for encryption and steganography part. Support for multiple compression algorithms is being added. During the experiments, FLIF was supported, but now JpegXL (JXL) is the new best lossless raster based compression. Support for payload execution and other interesting stuff underway. Can be done combining commands, but not inbuilt. Video steganography using ffmpeg is being tested.

Please refer to the PLANLOG for detailed feature plans: https://github.com/xerohackcom/Chaya/blob/main/PLANLOG.md LicenseChaya is licensed under AGPLv3 ContributionsHelping to report bugs and fix issues is appreciated. Support Chaya!You can support Chaya by Monero XMR donations: https://xerohack.com/support.php Address:4BJLkV4GyaHCYgGSqYBAe418jzaUz6FPe8M14U49SzL5GG81YyoVtWABgJszGUdpUf6MNoWL4kJu7KqQFnWxDvXi34QeA7n Download Chaya

___________________________
@hacking_Attack
@Hacking_Video

GitHub

Chaya/PLANLOG.md at main · xerohackcom/Chaya

Advance Image Steganography. Contribute to xerohackcom/Chaya development by creating an account on GitHub.

8 viewsedited 20:34

Hacking Articles Tips Tricks Videos Tutorials

Chaya - Advance Image Steganography
http://www.kitploit.com/2022/03/chaya-advance-image-steganography.html

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest & Hacking Tools

Chaya - Advance Image Steganography

7 viewsedited 21:01

Hacking Articles Tips Tricks Videos Tutorials

8 views21:01

Hacking Articles Tips Tricks Videos Tutorials

Chaya protects your privacy through steganography, cryptography (https://www.kitploit.com/search/label/Cryptography) and compression. It effectively encrypts your payloads using AES-256-GCM cryptography, embeds them using LSB-LPS steganography (https://www.kitploit.com/search/label/Steganography) technique into images and compresses them using FLIF to evade detection by performing lossless compression. Chaya is for your privacy. Chaya is backed by research (I will publish public version whitepaper on xerohack.com), and has proven to be by far the most effective image steganography tool as compared to other FOSS image steganography tools.
WHY CHAYA IS BETTER THAN THE REST? 0% detection rate using most of the publically available anti-steg tools like stegexpose and many more 100% data retention with almost the same capacity of standard LSB technique with LBS-LPS Transparent cryptography that gets as good as python has to offer There is no way this can be broken using a standard supercomputer unless there are exploits in python libs and python itself.. LSB-LPS will take exponetially large time to brute-force (https://www.kitploit.com/search/label/Brute-force) with larger graph images because you will have to attack every X,Y coordinates combo without any error. Making an ML to do so is also quite useless and can be only used for Natural language processing for example: which message is readable to find the coordinates. AFTER THAT, you have to break the encryption. MOREOVER, NLP ML cannot find the coordinates because the bruteforce (https://www.kitploit.com/search/label/Bruteforce) results will be ciphertext anyway. If for some reason the attacker knows the coordinates to start the de-steg process, they will have to break AES-GCM-256. GCM is better because it offers integrity along with co nfidentiality, which is why it's the better AES mode). United Nations Declaration of Human Rights (UDHR) 1948, Article 12 - (https://www.un.org/en/about-us/universal-declaration-of-human-rights)“No one shall be subjected to arbitrary interference with his privacy, family, home or correspondence, nor to attacks upon his honor and reputation. Everyone has the right to the protection of the law against such interference or attacks.”

International Covenant on Civil and Political Rights (ICCPR) 1966, Article 1 - (https://en.wikipedia.org/wiki/International_Covenant_on_Civil_and_Political_Rights)"No one shall be subjected to arbitrary or unlawful interference with his privacy, family, home or correspondence, nor to unlawful attacks on his honor or reputation. Everyone has the right to the protection of the law against such interference or attacks." Features v1.2

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest & Hacking Tools

Leading source of security tools, hacking tools, cybersecurity and network security. Learn about new tools and updates in one place.

7 viewsedited 21:01

Hacking Articles Tips Tricks Videos Tutorials

4 views21:01

Hacking Articles Tips Tricks Videos Tutorials

Supports AES-256-GCM cryptography Supports Standard LSB steganography Supports LSB-LPS steganography Supports FLIF lossless compression Cipher data logs as json Analytics support for your experiments Supports json to csv conversions Highly verbose cipher data logs Workspace Cleaner Easy installer for initial setup Comes with easy updater Changelogs Changelog (main channel): https://github.com/xerohackcom/Chaya/blob/main/CHANGELOG.md Changelog (dev channel): https://github.com/xerohackcom/Chaya/blob/dev/CHANGELOG.md Installation One Line Setup Use the following command for faster setup: Command For Ubuntu Based Distros sudo apt install python3-pip && sudo apt install git && git clone --depth=1 https://github.com/xerohackcom/Chaya.git && cd Chaya && pip3 install -r requirements.txt && sudo apt update && sudo apt-add-repository ppa:linuxuprising/libpng12 && sudo apt update && sudo apt install -y libpng12-0 Command For Debian Based Distros sudo apt install python3-pip && sudo apt install git && git clone --depth=1 https://github.com/xerohackcom/Chaya.git && cd Chaya && pip3 install -r requirements.txt && sudo apt update && sudo apt install build-essential devscripts && cd ~/ && sudo touch /etc/apt/sources.list.d/libpng12.list && echo "deb https://ppa.launchpadcontent.net/linuxuprising/libpng12/ubuntu hirsute main" | sudo tee -a /etc/apt/sources.list.d/libpng12.list && echo "deb-src https://ppa.launchpadcontent.net/linuxuprising/libpng12/ubuntu hirsute main" | sudo tee -a /etc/apt/sources.list.d/libpng12.list && sudo apt-key adv --keyserver hkp://keyserver.ubuntu.com:80 --recv-keys 1CC3D16E460A94EE17FE581CEA8CACC073C3DB2A && sudo apt update && sudo apt install -y libpng12-0 Using Installer.py You can install the dependencies using installer.py script. Run the following commands in terminal: sudo apt install python3-pip && sudo apt install git && git clone --depth=1 https://github.com/xerohackcom/Chaya.git && cd Chaya Ubuntu Based Distros python3 installer.py --ubuntu Debian Based Distros python3 installer.py --debian Usage Help Menu python3 chaya.py --help Automatic Operations First add few images (png format) to /autoexp/image_raw/ Remove the txt file from all autoexp sub-folders to avoid errors! Run the following command python3 chaya.py -enc Output Data Enc + Steg images -> /autoexp/image_steg/ Enc + Steg + Comp images -> /autoexp/image_steg_comp/ Cipher data -> /appdata/cipher_data.json Analysis data -> /appdata/analysis_results_enc.json Issues - v1.2.3 Issue with numpy import (solution under issues) Known bug with image-quality library (not fixed) Future Plan The plan is to build this into a modular framework where users can also add their custom scripts for encryption (https://www.kitploit.com/search/label/Encryption) and steganography part. Support for multiple compression algorithms is being added. During the experiments, FLIF was supported, but now JpegXL (JXL) is the new best lossless raster based compression. Support for payload execution and other interesting stuff underway. Can be done combining commands, but not inbuilt. Video steganography using ffmpeg is being tested. Please refer to the PLANLOG for detailed feature plans: https://github.com/xerohackcom/Chaya/blob/main/PLANLOG.md License Chaya is licensed under AGPLv3 (https://github.com/xerohackcom/Chaya/blob/main/LICENSE) Contributions Helping to report bugs and fix issues is appreciated. Support Chaya! You can support Chaya by Monero XMR donations: https://xerohack.com/support.php
Address: 4BJLkV4GyaHCYgGSqYBAe418jzaUz6FPe8M14U49SzL5GG81YyoVtWABgJszGUdpUf6MNoWL4kJu7KqQFnWxDvXi34QeA7n

Download Chaya (https://github.com/xerohackcom/chaya)

___________________________
@hacking_Attack
@Hacking_Video

GitHub

Chaya/CHANGELOG.md at main · xerohackcom/Chaya

Advance Image Steganography. Contribute to xerohackcom/Chaya development by creating an account on GitHub.

5 viewsedited 21:01

Hacking Articles Tips Tricks Videos Tutorials

Dark Reading: Attacks/Breaches
Cybersecurity Mesh Architecture: Hope or Hype?

Gartner has touted CSMA as one of the top technology trends for this year. But what is it really?

5 views22:27

Source

Hacking Articles Tips Tricks Videos Tutorials

Host Header Injection Leads To Pre-Account Takeover Worth 100$

Self Introduction :Continue reading on Medium »
Read more...

5 views22:44

Hacking Articles Tips Tricks Videos Tutorials

Ukrayna’nın Siber Savunması Hacken’ın Rolü: Dyma Budorin ile En Son AMA

Hacken ekibi kısa süre önce, Rusya’nın Ukrayna’yı işgalinin başlangıcından bu yana CEO’muz Dyma Budorin ile ilk AMA oturumunu düzenledi…Continue reading on Medium »
Read more...

6 views22:44

Hacking Articles Tips Tricks Videos Tutorials

6 views23:22

Hacking Articles Tips Tricks Videos Tutorials

Photo

hacking: security in practice
Cybersecurity: Why Blue Team Alone Isn't Enough

https://external-preview.redd.it/RZhQ61lhixSQgyBOALB1JVQCCv2jI1tkJTnW-iAGfo8.jpg?width=320&crop=smart&auto=webp&s=9778b7ea97d2716a391dec78636d59055c10b745 submitted by /u/rocklandreject
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Cybersecurity: Why Blue Team Alone Isn't Enough

Posted in r/hacking by u/rocklandreject • 1 point and 0 comments

3 viewsedited 23:22

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
How does the hacker group Anonymous work?

How are they able to hack into Russian places when other intelligence agencies were also likely trying to hack into the same places even before the Ukraine invasion? What makes Anonymous uniquely able to do this hacking? Also how does membership, recruitment, and organization work if the whole movement is based on anonymity?

submitted by /u/JarJarAwakens
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

How does the hacker group Anonymous work?

How are they able to hack into Russian places when other intelligence agencies were also likely trying to hack into the same places even before...

3 viewsedited 23:22

Hacking Articles Tips Tricks Videos Tutorials

hacking: security in practice
trouble using qusuar RAT

so I'm using quasar rat to experiment with (on my own machines) if i use a virtual machine with the correct ip and ports , when the infected clicks and executes the file i still cannot connect. anyone with experience plz help , i am using windows 10 on both machines

submitted by /u/combester007
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

trouble using qusuar RAT

so I'm using quasar rat to experiment with (on my own machines) if i use a virtual machine with the correct ip and ports , when the infected...

4 viewsedited 23:22

Hacking Articles Tips Tricks Videos Tutorials

Host Header Injection Leads To Pre-Account Takeover Worth 100$
https://medium.com/@rupachandransangothi22/host-header-injection-leads-to-pre-account-takeover-worth-100-1bd8f2d51876?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Medium

Host Header Injection Leads To Pre-Account Takeover Worth 100$

Self Introduction :

4 viewsedited 23:36

About

Blog

Apps

Platform