Steganography

Steganography #

At a Glance #

Steganography is the art and science of hiding a message, image, or file within another message, image, or file 1

Note: Steganography is used to hide the occurrence of communication.

General #

Determine the file type.

file filename.ext

Read file meta-data.

exiftool filename.ext

Extract printable characters.

strings -n 6 -e s filename.ext
Parameters
  • -n <length>: Print sequence of at least <length> chars long.
  • -e <encoding>: Character encoding of the strings that are to be found.
    • s: single-7-bit-byte characters (ASCII, ISO 8859, etc., default).
    • S: single-8-bit-byte characters.
    • b: 16-bit bigendian.
    • l: 16-bit littleendian.
    • B: 32-bit bigendian.
    • L: 32-bit littleendian.

Text #

Look for anomalies in font and spacing.

Unicode Text Steganography Encoders / Decoders

Images #

steghide 2 #

Steghide supports JPEG, BMP, WAV and AU file formats.

Display information about a cover or stego file.

steghide info filename.ext

Extract secret data.

steghide extract -sf filename.ext
Parameters
  • info: Display information about a cover or stego file.
  • extract: Extract secret data from a stego file.
  • -sf <file>: Specify the name for the stego file.

StegoVeritas #

StegoVeritas is a powerful multi-tool. Supports GIF, JPEG, PNG, TIFF, BMP file formats and will attempt to run on any file.

stegoveritas filename.ext

LSBSteg 3 #

LSBSteg uses LSB steganography to hide and recover files from the color information of an RGB image, BMP or PNG.

stegolsb steglsb -r -i filename.ext -o output.zip -n 2
Parameters
  • -r: To recover data from a sound file.
  • -i <file>: Path to .wav file.
  • -o <file>: Path to an output file.
  • -n <int>: LSBs to use (default: 2).

Online Tools #

Audio #

See steghide

WavSteg 3 #

WavSteg uses LSB steganography to hide and recover files from the samples of a WAV file.

stegolsb wavsteg -r -i filename.ext -o output.txt -n 2 -b 5589889
Parameters
  • -r: To recover data from a sound file.
  • -i <file>: Path to .wav file.
  • -o <file>: Path to an output file.
  • -n <int>: LSBs to use (default: 2).
  • -b <int>: How many bytes to recover from the sound file.

Sonic Visualiser #

Sonic Visualizer is an application for viewing and analysing the content of music audio files.

DTMF #

DTMF Decoder

Further Reading #


  1. “Steganography - Wikipedia.” Wikipedia, the Free Encyclopedia, Wikimedia Foundation, Inc., 31 Oct. 2001, https://en.wikipedia.org/wiki/Steganography↩︎

  2. Hetzl, Stefan. “Manual.” Steghide, http://steghide.sourceforge.net/documentation/manpage.php↩︎

  3. ragibson. “Ragibson/Steganography: Least Significant Bit Steganography.” GitHub, https://github.com/ragibson/Steganography↩︎