Some ideas

[operatorequals]

Hello people!
I checked your package and got really close to my heart as I tried to do a similar thing, called covertutils circa '17 (it's abandoned now).

When I say similar, I mean minimal protocol with chunking and sequence control, HTTP, DNS, ICMP and even TCP/IP stego support, polling mechanism, kind of similar.

What I'd like to propose, as I found it useful in that project was the malable payload idea. This would not only throw the payload in an HTTP request but (assuming it has high entropy - it's encrypted - looks random) place it in the etag or set-cookie header that are expected to be random strings most of the time (and explain to the other side to fetch it from there).

Anyway, it is a bit unsolicitaded, but I really felt I had to mention that, as I spent countless hours in the exact same concepts and maybe it could be of help!

If you happen to skim through my Python2 code, don't judge me too harshly. I never was a programmer! But I created a lot of documentation.

Cheers 🙃

[secu77]

Hi, your covertutils project looks great, and it's appreciated that you like Mistica 😊

Regarding the suggestion you were mentioning. If I understood correctly, you suggested the possibility of encapsulating in a header of the HTTP request (etag or setcookie) because of the high entropy in the data due to the encryption in use.

If this is what you were saying, I inform you that it is possible to define in which field you want to encapsulate in the HTTP protocol. In your case it would be:

# Encapsulating the data in the HTTP header: etag
./ms.py -m io:http -k "rc4testkey" -w "--header etag"
./mc.py -m io:http -k "rc4testkey" -w "--header etag"

# Encapsulating the data in the HTTP header: setcookie
./ms.py -m io:http -k "rc4testkey" -w "--header setcookie"
./mc.py -m io:http -k "rc4testkey" -w "--header setcookie"

On the other hand, if what you are suggesting is that client and server encapsulate the information in different fields, for now, that is not supported.

I hope the information is helpful. And although the project is stopped for now, any contribution or suggestion is welcome!