Sleezy
Modular Steganography Workbench & Cryptographic Steganalysis Suite
Local-only, zero-telemetry modular steganography workbench and cryptographic steganalysis suite featuring AEAD encryption, Argon2id KDF, and multi-carrier bitplane embedding.
The Fragility of Traditional Steganography
Historical steganography utilities like steghide, zsteg, and OpenStego suffer from severe architectural limitations: they are rigid, support only one or two legacy file formats, rely on sequential LSB embedding that is easily detected by statistical algorithms, and lack modern authenticated encryption.
Conversely, most graphical steganography tools are shallow wrappers around 1-bit PNG modifications that leak plaintext metadata and offer zero resistance to statistical steganalysis.
Sleezy was designed as a modern, modular cryptographic workbench. It provides a unified pipeline across multiple carrier media, combining memory-hard Argon2id key derivation, authenticated AEAD ciphers (XChaCha20-Poly1305 / AES-256-GCM), and PRNG scatter embedding to defeat sequential statistical detectors, paired with a full analytical steganalysis suite.
Core Cryptographic & Steganographic Capabilities
Unified Multi-Carrier Architecture
Every carrier format operates as a plugin behind one authenticated pipeline: lossless images (PNG, BMP, TIFF, WebP), 16-bit PCM audio (WAV), Unicode zero-width spaces (ZWSP/ZWNJ), Cyrillic homoglyphs, and archive trailer comments (ZIP, DOCX, XLSX).
Authenticated AEAD Encryption & Argon2id KDF
Derives master keys using memory-hard Argon2id (configurable memory and iterations) and encrypts payloads with authenticated XChaCha20-Poly1305 or AES-256-GCM.
Cryptographic PRNG Scatter (Fisher-Yates)
Rather than embedding bits in sequential order (which leaves glaring statistical signatures), Sleezy scatters bits non-sequentially across bitplanes using a cryptographically keyed PRNG.
Full Analytical Steganalysis Engine
Performs Chi-Square (χ²) PoV statistical attacks, Shannon sliding block entropy scanning, LSB ratio flattener detection, and 2D bitplane density heatmaps to detect covert channels.
Fail-Safe In-Memory Self-Verification
Every embed operation executes an immediate in-memory re-extraction and SHA-256 checksum verification before writing the output carrier to disk.
Hardened Container Defense in Depth
Built-in protection against path traversal, zip/tar-slip, decompression bombs (capped at 2 GiB bounds), and timing attacks using constant-time hmac.compare_digest.
Cryptographic Embedding & Steganalysis Flow
How raw sensitive payloads are transformed, encrypted, scattered, and mathematically verified inside innocuous carrier files.
Manifest Packaging & High-Ratio Compression
Payload (text, file, or multi-directory tarball) is encapsulated with metadata and compressed via Zstandard level 12 or Deflate.
Argon2id Key Derivation & AEAD Encryption
Passphrase and optional keyfile hash pass through memory-hard Argon2id KDF; ciphertext is sealed with XChaCha20-Poly1305 authenticated tags.
Fisher-Yates Pseudorandom Bitplane Scatter
Keyed PRNG calculates pseudo-random coordinate sequences across carrier bitplanes, scattering bits to defeat sequential statistical detection.
Immediate In-Memory Self-Verification
Pipeline executes an instant extraction dry-run in memory, verifying the SHA-256 digest before committing bytes to the carrier file.
Steganalysis & Entropy Verification
The carrier is evaluated using sliding block entropy and Chi-Square distribution curves to ensure zero anomalous density spikes.
Artifact Analysis & Screenshots
Click any image to inspect forensic details, telemetry graphs, and terminal outputs at high resolution.
Sleezy Terminal Workbench & Carrier Lineup
Interactive CLI Shell & Profile SelectionThe interactive Sleezy CLI showing multi-carrier plugin configurations, operational profile selection, and carrier capacity calculations.
Secure Payload Embedding Pipeline
Argon2id KDF, AEAD Encryption & Instant Self-VerificationLive terminal output demonstrating manifest container packaging, Argon2id memory allocation, XChaCha20 encryption, and successful in-memory SHA-256 self-verification.
Authenticated Extraction & Decryption
Constant-Time Header Validation & Data RecoveryExtraction workflow verifying password authenticity, decrypting scattered bitplanes, and safely writing the extracted payload to destination without path traversal risk.
Steganalysis & Bitplane Density Heatmap
Shannon Block Entropy & Chi-Square AnalysisStatistical steganalysis report showing sliding block entropy scans, Chi-Square PoV curve, and 2D ASCII density visualizations of carrier noise.
Argon2id Memory Hardness
Defeats GPU/ASIC brute-force dictionary attacks during password cracking.
Zero-Telemetry Architecture
100% local processing; zero cloud calls, tracking, or network dependencies.
Mission Profiles Presets
Preconfigured profiles: max-stealth, ctf-quick, max-capacity, covert-text, watermark.
2D ASCII Bitplane Heatmaps
Visualizes carrier bitplane noise distribution directly in terminal stdout.