QRCode-Video-Data-Exfiltration

Exfiltrate data with QR code videos generated from files by HTML5/JS.

Drop files here...

Data => QR Code Video

Drag and drop a file into the browser window where it says Drop files here.... A video of QR codes should start flashing. Note: you can also host this on your own server...

Point a cellphone camera or other video capture device at the screen and record. Make sure to record until you have seen the blue flash twice. This will ensure that you have gotten all the data.

QR Code Video => Data

First you need to convert the data to something that opencv will understand. See this page for information on compatible formats. I have found the following command to do the trick for me:

mencoder ./foo.mov -ovc raw -vf format=i420 -nosound -o out.avi

Next, you will need to run this video through the processing script. Remember to provide the full path to the video rather than the relative path. Blame opencv for this, not me. This should look like:

python ./video_processor.py /home/mastahyeti/out.avi

You should see a bunch of stuff about frames and what-not. Unless you see any errors, this ins’t too important. At the end you should see your previous data.

Python Dependancies

Notes

Author

Ben Toews (@mastahyeti)

Credits