Explore Steganography

You already know encryption scrambles content. Steganography does something stranger: it makes the fact that a message exists disappear entirely. A JPEG with a payload in its low-order bits looks like every other JPEG on the server — no red flags, no ciphertext screaming 'inspect me.' That distinction changes what you're defending against, and most people learn it backwards.

your tutor starts by putting a real carrier file on the whiteboard next to its stego version, and asks you to spot what changed. Usually you can't — that's the point. From there the sessions move into where this actually lives operationally: LSB embedding in images, DNS tunneling and timing channels on the wire, and the CVEs (2007-0163/0164, and newer RCE flaws in steganalysis tools) that show password protection is often theater.

You'll also work through why nothing catches all of it — hash matching, chi-square statistics, UEBA baselines, each covering a different gap — and why APT groups like Lazarus and TA558 use this alongside legitimate infrastructure, not instead of it.