StegArmory

StegArmory embeds machine code (shellcode) within portable network graphic (PNG) images using image steganography to conceal payloads from antivirus detection.

Key Features:

• Steganography Techniques: Employs Least Significant Bit (LSB) modification of pixel values for faster encoding with limited payload capacity and Pixel Value Differencing (PVD) for greater payload capacity and enhanced robustness at the cost of speed.
• Shellcode Embedding: Embeds machine code (shellcode) into PNG images to mask payloads from conventional antivirus detection.
• Performance and Detection Metrics: Includes performance benchmarking and evaluation of detection metrics using sample cover images to assess efficacy in bypassing typical malicious-payload detection.

Scientific Applications:

• Steganography Research: Enables study of image-based steganographic methods, specifically LSB and PVD, for embedding data in PNG images.
• Countermeasure Development: Supports evaluation and development of steganalysis and antivirus countermeasures via detection-metric benchmarking on sample cover images.
• Offensive Technique Analysis: Facilitates analysis of techniques for concealing shellcode in common image files to inform defensive research and threat modeling.

Methodology:

Uses Least Significant Bit (LSB) and Pixel Value Differencing (PVD) steganographic methods to embed shellcode into PNG images and performs performance benchmarking and detection-metric evaluation using sample cover images.