Stego-Drop: Hiding Shellcode in PNG Images with LSB Steganography

Steganography is the practice of hiding data inside something that looks completely normal. Unlike encryption, which makes data unreadable, steganography makes data invisible. On a red team engagement, that distinction matters. Encrypted traffic gets flagged. A PNG image of a cat sitting on a keyboard? Nobody looks twice. I built stego-drop to explore this concept hands-on: a Python tool that embeds binary payloads (shellcode, scripts, whatever you want) into PNG images using Least Significant Bit encoding. In this post I’ll walk through how LSB steganography works, how I built the tool, and how to use it. ...

February 24, 2026 · 7 min

Linux-Enum: Linux Auto-Enumerator

Introduction Linux-Enum is an automated enumeration tool I built to speed up the initial reconnaissance phase when targeting Linux machines. It detects open services and runs the appropriate enumeration tools, organizing all output for easy review. Language: Python 3 Target: Linux systems Purpose: OSCP preparation, penetration testing GitHub: github.com/jashidsany/linux-enum Why I Built This During OSCP preparation, I found myself running the same enumeration sequence on every Linux box: Nmap scan Gobuster if web is open enum4linux if SMB is open showmount if NFS is open snmpwalk if SNMP is open This tool automates all of that and intelligently runs tools based on what ports are open. ...

February 22, 2026 · 3 min

Win-Enum: Windows & Active Directory Auto-Enumerator

Introduction Win-Enum is an automated enumeration tool I built to speed up the initial reconnaissance phase when targeting Windows machines and Active Directory environments. It runs common enumeration tools in sequence and organizes the output for easy review. Language: Python 3 Target: Windows / Active Directory Purpose: OSCP preparation, penetration testing GitHub: github.com/jashidsany/win-enum Why I Built This During OSCP preparation, I found myself running the same enumeration commands repeatedly: Nmap scan SMB null session check User enumeration AS-REP roasting attempt Web directory brute forcing This tool automates all of that and saves output in an organized structure. ...

February 22, 2026 · 3 min