The Stuffer

No ratings

Presented at Anycon 2017 by

The Stuffer is a utility which exploits the reserved bits and padding space of multiple layers of the TCP/IP protocol stack for covert data transfer between two or more networked systems. Implemented using a custom Python library, Stuffer is easily integrated into existing or future Python applications. Stuffer is currently implemented as a proof of concept in Python, and could be easily ported to other programming languages such as C/C++. This concept can be leveraged for command and control systems for botnets, as a method of covert data ex-filtration, as well as a pseudo-private line of communication. Current firewall and intrusion detection/prevention technologies are ill-equipped to protect against this data hiding technique.