0

I need to scan this picture for steganography as the meta-data suggest there is some concealment. I'm new to this process and don't know which free tool is the most comprehensive.
enter image description here EDIT:
1. as I suspected stackexchange image upload does a exif clean, the metadata comment read: Getting warmer! Use concealment to uncover even more as you hunt for the solution string to this puzzle...like hide and seek...
2. A hex editor shows nothing conspicious with a starting point of "FF D8" and end point of "FF D9"
3. The image is only 48 KB
4. StegDetect is not working with this image.
5. With Polynomial and Steve's comments I realize that I should learn (Kali) Linux before asking questions that that are way over Windows' head. If you have a (free) Windows solution, please answer.

10
  • 1
    Have you tried strings over the image? – Polynomial Jun 10 '15 at 17:11
  • No comprendo. Elaborate, please. – Manumit Jun 10 '15 at 17:16
  • strings. – Polynomial Jun 10 '15 at 17:19
  • 1
    Come on @Manumit get over it and run a VM ;-) – Steve Dodier-Lazaro Jun 10 '15 at 17:34
  • 1
    Asking for tools to recommend is off-topic. Plus, the answer to this puzzle isn't a tool, but a process. – schroeder Jun 10 '15 at 18:17
2

A quick googling revealed this site with solutions to your puzzle.

Opening the picture with a hex editor reveals a password, concealment. Using JPSEEK to extract the hidden data from the image, using this password, gives the solution, exponential.

Oddly enough, the URL for this solution (http://www.rtncyberjobs.com/pz2/exponential) doesn't work.

4
  • Once I saw JPSEEK GUI options the hide and seek part made sense. – Manumit Jun 10 '15 at 20:10
  • 1
    well geez spoiler alert! Now what am I going to do on my coffee break? – Matthew Peters Jun 10 '15 at 20:12
  • 1
    Well, you can do it on "hardcore", using the picture from this post instead of the original – Dmitry Grigoryev Jun 10 '15 at 20:16
  • Yeah I tried inputting the second solution in many ways, it's always a 403 deny. Glad you said it, because I felt sad not being clever enough to submit the answer. – Manumit Jun 10 '15 at 20:21
1

Keep in mind steganography is based on replacing certain bits in each byte to hide information. However there are different schemes that have evolved over the years but the principle is the same. Check out the link below and look at the free tools Mark Davidson suggests.

https://security.stackexchange.com/a/2145/78337

p.s. if you want to work in security learning linux will make you better and more employable. Also keep in mind Kali linux is essentially just Debian with a whole bunch of tools in it. I also made the mistake thinking I need to "learn" Kali until I found out I only needed a few tools in Kali to get the job done.

Not the answer you're looking for? Browse other questions tagged or ask your own question.