Conceal Secret Messages or Data Through Steganography with Steghide [Tutorial]
HTML-код
- Опубликовано: 28 авг 2024
- How to Hide Data in Audio or Image Files
Full Tutorial: nulb.app/x47ol
Subscribe to Null Byte: goo.gl/J6wEnH
Kody's Twitter: / kodykinzie
Cyber Weapons Lab, Episode 031
Steganography was in the news recently when Russian hackers used Instagram photos to control compromised routers. On this episode of Cyber Weapons Lab, we'll explain how to encode secret information on an image or audio file using Steghide.
To learn more, check out the article: nulb.app/x47ol
Follow Null Byte on:
Twitter: / nullbyte
Flipboard: flip.it/3.Gf_0
Website: null-byte.com
Weekly newsletter: eepurl.com/dE3Ovb
Vimeo: vimeo.com/chan...
![Hack Wi-Fi & Networks with the Lazy Script Framework [Tutorial]](http://i.ytimg.com/vi/PUQ1bMtft-o/mqdefault.jpg)
![Hack Wi-Fi & Networks with the Lazy Script Framework [Tutorial]](/img/tr.png)
![BabyChiefDoit - Wonderful Time (Official Music Video) [Shot By @Rxllo]](http://i.ytimg.com/vi/_Bfqt3zV2KE/mqdefault.jpg)
Absolutely loving the videos on this channel!
I cant uNdErStAnD people who dislike this kind of videos, great videos you have on your channel bro
i doth think that they are haters i think that they just dont like an elament in the video for example(it takes to long to get to the point)
A steg tool I've used in the past is the digital invisible ink toolkit, it has a GUI for people that like that, and allows you to use different methods of implanting your file in the image it's pretty cool :)
Thanks will have a look
Wow, you guys are really pumping these videos out. I am grateful. I remember using SilentEYE on windows a long time ago. Even cooler was encoding encrypted files into MP3's like my boy Elliot on mr robot lol. Acutally I believe you guys even did an artical on DeepSound probably 3 or 4 years ago now.
Nice, you tagged the old article from 2015 in the new article for this tutorial. I was watching a video a couple months ago that was a cool topic. Compromising iOS and Android phones has become difficult without user interaction. So the key to the castle is compromising the WiFi stack. Every phone is broadcasting Beacon and probe frames calling out desperatly trying to find trusted networks such as the Home network. So using airplay you record these frames obtaining the actual names of trusted and home networks. Then create an AP with the same name and it fools the WiFi card into thinking " home sweet home" MEANWHILE lol ... Then they get home and see their cell is strangley already connected to the home network or they dont, either way you've had your fun in the in-between time. I also saw some guy do it at Blackhat some of the names of the networks were hilarious.. Most people live on their phones and tablets, everyone is walking around with a phone, often not a laptop. So that is the point of entry atleast the way I see it. A lot of videos are about exploits, temporary in nature, but what really interests me is true malware and infecting the devices, with something self replicating like a worm that they will take home with them lol. This way when they connect to the network, or plug into their PC it spreads from device to device. Then they are "pwned" and we can start talking about botnets, RAT's and such. Its like a lost art because anti-virus software has become so effiecient, but when there is a will there is a way. The point is to get it done with little to no user interaction which is very difficult without physical access. But you're cyber weapons Sensai , I'm just here to learn. Jus throwing somethings out there for this new platform you spoke about. Thanks again Kody.
I really love your channel's videos! Full of information. Thank you so much!
Great Work. The best hacking channel that I have ever watched on RUclips!!
Yes . He is really good .
as usual an extremely clear explanation. Took me ten minutes to figure it out and get some messages in cipher embedded within image. Must add though it does not recognize png, but does jpg. U got a like and a sub from me. And i added this video to a playlist on my channel
Thats amazing. I would like to know wether it is possible to execute a script when open the image file
Yep thats possible... It's called binding a payload
How bots upadate themselves using steganography ...?? Please make a video on it ..
Keep it up
Peace :)
my guess is the embedded message executes code when received that in turn installs an update
The bot regularly looks if the insta acc has posted smth new. If it has, it downloads the pic and extracts info from it, and then do wtv it says
I’ve been waiting for this for so long
Your video really teaches the viewers... Love your videos....
wow that cat is huge and perfect, I wish I had one like that
Steganography is Cool!
Just another great video. Not surprised!
Great delivery of the gist!
Dude,You are a perfect teacher
Ur channel is so god damn awesome
Nice videos. What laptop do you use?
Excellent! Thankyou for the thorough video.
Great tutorial. Thank you.
Great tutorial, easy to understand, Thanks!
Incredible! Never heard of this kind of hiding
Hello it's great video.I want to know whether we can use this for file upload vulnerability
Since info can be embedded into an image file, makes me wonder if code that's embedded into a photo image could easily be executed by simply viewing that image?
No! To know why, try to read the principle on which Steghide (and similar tools) work. To be short, the code though embedded in the image file, is not in an executable form. You would be obliged to first retrieve the code from the image file before executing it.
Thank you null byte.👍👌
Awesome knowledge!!!
very thankful that you share that knowlwge!!!
You cover so many things I really wanna learn more... I'm not sure why but after watching mr robot something tells me hacking may suit me lol
Now I see why you have cat photos in your room
I have to show the world
Commands used: apt install steghide, man steghide (this command shows a description of what the program does), steghide embed -ef '/root/virus.txt' -cf '/root/Image.jpg' -p password (-ef: embedfile -cf: coverfile -p: passphrase), steghide extract -sf '/root/Image.jpg' -p password -xf '/root/viruses.txt' (-sf: stegofile -xf: extractfile).
brilliantly done. and clear. The best.👍
Thank you so much for sharing. I'm new with everything with my phone,apps,to what your teaching me. I'm asking and hoping you'll take me under your wing. I want to learn everything that you know. Only if you want to and have time to. I will respect your decision. Hope to hear from you. B. V.
I played around with this back in the early 00s with Wjndows software.
Hello... Um .. I have a doubt .. what if we change the filters of the image . Does it affect the data encoded on the pic ... 😘😍
It may destroy the data
*Fat cat is now officially an Fat bird*
Awesome!
Awesome work !
Hey I've seen videos like these I really want to know more about these
i get : can't find the package steghide
what to do ?
I think you would like my Fontepx prog. It creates one time pads (many time pads) and random character sets, and embeds within a steg pic. It also captures mouse movements for random values. Not released it yet.
Did you ever release Fontepx?
Looking at it from the forensic side of infosec, Is there a way to find out if a file has something embedded in it / if this tool has been used on an image.
Great video!
yes you would compare the original, if you have one....
it also works on parrot os
plath's lazarus, nice pick
One of my favorites
Can you give a tutorial on spoofing file extensions
Hey man, got a question...🤔
If I again zip the steganographed image for the sake of retaining original image quality, can it cause any harm to the hidden data?
Thanks really helpful
Useful
Can install geolocation victims clicked on pic then grabbing Current location..??its possible or not
Very helpful thank you kedy. 🤩🤩🤩🤩
How do you use kali? is this a dual boot or a bootable usb? I heard bootlable usbs are not a good idea for mac
Woooow great!!!!
Can we embed .exe files?
So, how does one (say a police officer trying to solve a crime), go about looking at photos and seeing if there is any hidden files within the picture? How can one list hidden files within? If someone is trying to catch a bad guy, we wont know the filename or if it has a password. Would Ollydbg work for that?
So Instagram can destroy encoded data? Cuz it reduces dimensions
Yes, anything that changed the pixels too much can
Sir, can you please explain how we can encrypt our data by using steghide option -e ??
Steganography. Trying to put a message inside and old audio cassette...
You said that we can add audio files (.MP3) but it's showing error like not supported format.
my stego files are decrypting with only 3 characters in the file. does this mean thats wll thats in the file?
Thanks mate, but can you also tell us how to do this on an audio file, is tge process same
How did you get the image and secret file on Kali Linux ? I just newly started.
wouldn't uploading an image to instagram or other service alter the originally uploaded image file to the point of damaging the hidden file? for example, facebook compresses their images.
Yes, unless you had an image that was already the right size and dimension
Not need KALI for steghide, it can use with your favorite distro.
Did you try Terminator?
Is it possible to encode autorun scripts and apka into the image in this way?
Is there a link for the wallpaper? look cool
What if i need to extract the info from an image but i dont know the password
Just wondering; Is that a mac, or linux computer, or something else?
Cause I'm thinking about getting a computer some time...
I do not recommend my setup. I use an old lenovo running kali and a macbook pro using virtualbox
Can you use soemthing like this to hide a image inside a image ?
me suscribí subes muy buen contenido gracias por explicar
y ame tu intro con Vivbrasphere 7u7r
2020
every time i try to embed something steghide just tells me that it can't open the file. can anyone help me? i need this for my cybersecurity course.
It says 'not able to open' secret.txt. what should I do ?
thanks dude.
Can you help me with two questions that I figure out now?
1. What about I have been given a photo and told me to extract hidden data from the photo without providing password?
2. I have told to find a hidden message in a text which can be like that:
Find the hidden message from this text: mcikg jnxko vbgnp ksi
This may help you M3-B-III-1,17,12-AAA
Its asking for Passphrase which I dont know....Please Help me out.
is that possible to embed a image to an audio file ?
Like the Beatles and Led Zeppelin
Amazing just amazing
Grt
Thanks
How to bind apk payload into img??
legit what i was thinking
Lol
This sounds useful in copyright for images. Perhaps a bot that searches for images with an owner's stenography to claim image rights if they get appropriated.
Edit: I wrote this before watching the whole video.
What sucks for me is my machine says “unable to locate package”
it says it cant locate the package
Any way to do this on Windows?
Thanks ❤️❤️❤️❤️❤️❤️❤️❤️
Where can i get password passprase . cause its always fail when i type anything to extract .
I don't really understand the point of this. If you're trying to communicate in secret with someone, you wouldn't use steganography, you can just use an end-to-end encryption app based on public key encryption.
You're missing the point. End to end encryption you are obviously sending encrypted data. The point here is to hide one file in another file so it's not clear anything is being sent at all.
Its often used by Pedos to send pictures hidden inside pictures -- hidden in plain sight. that type of thing.
Except the file size of the image is much larger than it should ever be
Its more for plain sight public transferers than transmission based communication
@@joe_schmoe_420 no, you loose information as you hide information
How to extract data if we dont know the password?
Nice)))
How to decrypt from another computer if you dont know the file name
pretty cool
Your are so cool bro....
hello i was looking this i want to use for my Affiliate links
What the use of secret.txt? where to get it?
that's whatever info you want to hide.
Metadata?
When I try to install steghide it says access denied does anyone know how to fix this?
Are you root? Use sudo.
There is a program in github.com/mostafavtp/cs_projs/blob/master/DataOnImage repository that use one bit per color to hide data on image. It is open source and a small program. It has a GUI on windows also.
Interesting.. So we could easily get all kinds of s*it in our phones via just downloading a few pics from a friend whose computer/phone has been hacked?
Long Live Rock
First!
But you still need password to decode...
Second