0

I am currently trying to figure out a steganography challenge. I was given 3 images, a secret.txt file and a "binary" file. There are no instructions as this was part of another challenge. I am looking for someone to point me in the right direction. I just cant seem to make anything out of it lol. Here is a link to the files.

Not looking for anyone to solve this for me, just offer some guidance on tools to use and what direction to go. Thank you for your help.

0

For JPG images it is possible to use a tool called Stegdetect to identify images which are suspicious to bare the steganographic content and identify a tool used to hide the message. It can even try to decode or bruteforce some of the algorithms. Original site of the tool disappeared from internet, but you can still download the tool from some trustworthy archives like Debian - https://archive.debian.net/etch/utils/stegdetect Here is guide how to install on Kali linux - http://rfc.red/installing-stegdetect-in-kali-linux/ http://freecode.com/projects/stegdetect/

Some more tools:

1

I would suggest you to read these papers

http://stanford.edu/class/ee103/lectures/steganography/steganography_slides.pdf http://www.mitpublications.org/yellow_images/1361357590_logo_File%206.pdf

wiki https://en.wikipedia.org/wiki/Steganography_tools

and even though this tool comes under audio stenography it may give you some deep insights. http://jpinsoft.net/DeepSound/

  • 2
    your answer is mostly links, and links are notorious for going dark. Can you modify it to include a brief summary of each, to make it more valuable to the rest of us? – John Deters Oct 20 '16 at 0:01
  • As John said, the Standford link is dead. – cutrightjm Oct 1 at 0:37
0

I'm guessing the jpeg images have been encoded with a stenography tool (such as steghide). As you're probably aware, stegonography is the process of embedding messages or other data within an image. Often it is difficult to see the difference between the original and the altered jpgs with the naked eye.

Tools like stegdetect will identify if the the 3 jpegs are suspected of containing hidden info. Often the tool used to perform the stenography will allow the stenographer to protect the resulting file/jpeg from being decoded by applying a password. I'd guess that is what the 'secret.txt' contains? If not then you can run another tool called stegbreak, which uses a wordlist in an attempt to break the password via brute force.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.