Home

Steganoroute

Send steganograph text messages to mtr using fake hops in the network.

Steganoroute is a tool to send steganographed text messages to another computer over the network. The receiver must make a traceroute to the sender using the mtr program (and pressing d once to switch the display mode to the continuous graph). This tool, the sender, creates several fake hops and makes them answer the ICMP packets (or not) to write the letters one by one on the mtr client screen.

So far, you can only use mtr from one host. Sorry, I'm working on this.

Features

• It can print upper and lower-case letters.
• It can print in normal or color-inverse mode.
• It can loop forever.
• It should work on your own localhost computer, on your LAN and over the Internet.
• Is uses the Sinclair ZX Spectrum (1982) font.
• You can select the TTL value on demand and therefore 'move' the text up and down the mtr graph.
• You can filter the IP address that should receive the traceroute. If you don't filter it, every traceroute coming out of the server will mysteriously add fake hops to any destination! Oh my... what did I create?
• You can feel the sensation of being MITMed by the top intelligence organizations in the world by using the conspiracy mode!
• It can automatically manage your firewall to stop receiving pings during operation.

Firewall

Your computer should not answer pings in order for this program to work. So, if you are answering pings (or you don't know and you never touched your firewall) then you have two options: do it yourself or let the program do it.

Easy way: Use -f parameter and let the program do it.

Paranoid way: Use something like
iptables -D INPUT 1 -p icmp --icmp-type 8 -j DROP
to stop the pings, and something like
iptables -D INPUT 1
to delete that rule afterwards.

Usage

Remember that your computer should NOT answer to ping during operation, so you can stop it yourself by hand, or use -f to let the program manage that for you.

Also remember that you should start the program before doing the mtr!

To test on your own computer and loop forever

Server:
./steganoroute.py -i lo -m "Hello World" -l -f
Only the first client that connects receives the text right. Any further client only destroys every text on all the clients.

Client:
mtr -t <your lan="" ip,="" not="" localhost=""> (and press d after the start)</your>

To use on any other network and loop forever

Server:
./steganoroute.py -i <your-lan-interface> -m "Hello World" -l -f</your-lan-interface>

If your interface is wlan0, then:
./steganoroute.py -i wlan0 -m "Hello World" -l -f
Only the first client that connects receives the text right. Any further client only destroys every text on all the clients.

Client:
mtr -t <server-ip> (and press d after the start)</server-ip>

For example if your server is 192.168.1.2, then:
mtr -t 192.168.1.2
(and press d after the start)

To change the TTL value on demand

A TTL of 1 is useful in the local network.
./steganoroute.py -i wlan0 -m "Hello World" -l -t 1 -f

If you keep the mtr client up, and you stop the server, change the TTL value and start it again, you will see how you can 'move' the text down and up the mtr!
./steganoroute.py -i wlan0 -m "Hello World" -l -t 2 -f
./steganoroute.py -i wlan0 -m "Hello World" -l -t 3 -f
./steganoroute.py -i wlan0 -m "Hello World" -l -t 4 -f

This should be done after the mtr has begin printing the text with the TTL value that reaches your computer. If you start with a TTL value of 10 and the mtr client is only 1 hop away, it will s
ee nothing.

To filter which client is authorized to connect

./steganoroute.py -i wlan0 -m "Hello World" -l -t 1 -s 192.168.0.20 -f
Only IP address 192.168.0.20 is authorized to receive the message. So no one can mess with your text.

About the font

Now it is using the Sinclair ZX Spectrum (1982) font. It is a regular sans font.

Screenshots

Hello World, normal mode

Hello World negative mode

Hello World

Hello World, normal mode

Changing the TTL on demand

Conspiracy mode

---