I've been looking into how some people have been messing around with encoding their information into a stream of black and white pixels similar to a QR code and uploading it to YouTube to store data, I was wondering how difficult would it be to write some sort of program or if there's already something out there thats been created to encode whatever data you have and exfil it out of the serial port of a computer to be recorded. Only because I imagine to whoever is watching the endpoint won't be suspecting why certain information is showing up on a screen which is likely what this type of exfil would look like and even though it would still show a trace of who read the data last it wouldn't show it being saved or transferred through any media right? Mainly trying to figure out a way that this could be done via native software for a local LOTL style attack/exfil. I know you would have to also have some sort of device that would be capable of reading the encoded data from the serial port but I imagine a Pi or something even more simple could likely do that without much issue.
[link] [comments]
from hacking: security in practice https://ift.tt/yAtmvq1
Comments
Post a Comment