rickdejager/stegseek

:zap: Worlds fastest steghide cracker, chewing through millions of passwords per second :zap:

stegseek's Issues

[PROPOSAL] - StegSeek in BlackArch repository

Hello @RickdeJager
StegSeek is a wonderful tool. Why don't you insert it inside BlackArch repo in order to be retrieved very quickly by pacman -Syy stegseek?

If you need support, I can create for you the PKGBUILD to be submitted on BlackArch repo.

Thanks!

Feature request

Requesting for a feature to crack passwords of all compatible files in a directory to avoid the use of scripts

error: could not open file "[filename.png]"

I'm confident I'm doing something wrong here but, I'm trying to crack an image from a riddle.... I followed instructions with Powershell/Ubuntu and have the stegseek build running. when i try to crack the filename i get that error message. im new to all this and your build was my first so bare with me.

m1 how to install on a m1 mac running kali?

qustion on a m1 mac installation running kali on a vm

std::bad_alloc when trying to crack file

I am on Kali, I am trying to crack a bmp image that has an embedded txt, but every time i run the command to crack I get -

terminate called after throwing an instance of 'std::bad_alloc'
what(): std::bad_alloc
zsh: abort

I have no idea what to do with this, any help?

StegSeek for arm64

dpkg: error processing archive stegseek_0.6-1.deb (--install):
package architecture (amd64) does not match system (arm64)
Errors were encountered while processing:
stegseek_0.6-1.deb

make issue

I wanted to install the tool on the latest Ubuntu desktop but I got these errors:

Can someone help me how to solve it?

arm64 support

First of all awesome tool! Is arm64 support on the roadmap? It would be awesome to be able to run this on a M1 Mac.

Apple M1 CPU support

As a user, I would like to run on M1 mac without this error

docker run --rm -it -v "$(pwd):/steg" rickdejager/stegseek finalClue.png
...
WARNING: The requested image's platform (linux/amd64) does not match the detected host platform (linux/arm64/v8) and no specific platform was requested
StegSeek 0.6 - https://github.com/RickdeJager/StegSeek

Installation Problem!!

i was unable to install it in linux arm64.
Please help!!

⚡ Now that's a fast steghide cracker

Hi! Just popping by to say say I'm genuinely impressed at the speed of StegSeek as opposed to StegCracker, nice job!
As your tool puts all others to shame I'll officially be retiring StegCracker and passing on the torch to you 🔥

Happy holidays! 🎅

[v] Added password guess: "flag.jpg".

hello! great tool. i have this error, i checked rockyou on sha256, its correct. why this error happening?

Or maybe it should work like that, idunno?

!] error: Could not find a valid passphrase.

I ran this command and got an error which says "Could not find a valid passphrase."

stegseek brooklyn99.jpg rockyou.txt

[!] error: Could not find a valid passphrase.

Don't stop on first result

A steghide file may be encoded multiple times with different passwords. In this case StegSeek will always exit on the first hit.

This is even more relevant for seed cracking, where you may encounter a false positive, causing the program to exit.

Another feature request

Hey, so first and foremost: I absolutely love this program. The speed of it genuinely surprised me and honestly I think I'll use this for the foreseeable future.

Though one thing that gets my attention would be in regards to cracking the seed of a steg file. I'm only now starting to look at the source code so I could be wrong, but is there any way for the encrypted data to also be outputted aswell? That way, someone could use a program like hashcat to crack it (assuming they want to use brute force rather than a wordlist obviously, or maybe something entirely different for that matter.)

Again, this could very well not be possible, but it was just an idea I had considering unencrypted data was able to be successfully parsed and dumped.

Cheers! And thank you again :)

Custom extractor fails on BMP (Possibly other formats as well?)

The custom extractor appears to return false negatives on (certain) BMP files. In a nutshell, this causes stegseek to dismiss valid seeds/passwords for these filetypes.

The "normal" password extractor that came with steghide's code still works, so this appears to be an issue related to my changes.

custom wordlist issues

I am currently trying to crack this image, but stegseek could not find a valid seed and rockyou.txt did not have the password. I have an idea of what the password could be, but I do not know the format necessary for a custom word list.

Output file location doesn't use stripdir

When cracking a file in a different directory, the output file will be written to that directory as well, rather than the current directory.

1. place a stego file in a subdir (data/steg.jpg)
2. call stegcracker --crack -sf data/steg.jpg -wl someWordList.txt
3. Output is placed in data/steg.jpg.out rather than steg.jpg.out

error: Could Not Find a Valid Seed

I'm trying to use StegSeek to crack the attached image, but it can't find a valid seed, and none of the wordlists I've used can valid passcodes.

Is it possible the image is a different type of steg

?

If you are a mac user, you should read this.

Building from source, use mac ports to install packages, with homebrew there are some linking errors, but mac ports automatically handles it, so errors are not there with mac ports

Fatal Error: mcrypt.h - no such file or directory

(haze㉿kali)-[~/hacking/stegseek/build]
└─$ make
[ 1%] Building CXX object src/CMakeFiles/stegseek_lib.dir/Arg.cc.o
[ 2%] Building CXX object src/CMakeFiles/stegseek_lib.dir/Arguments.cc.o
In file included from /home/haze/hacking/stegseek/src/Arguments.cc:31:
/home/haze/hacking/stegseek/src/MCryptPP.h:28:10: fatal error: mcrypt.h: No such file or directory
28 | #include <mcrypt.h>
| ^~~~~~~~~~
compilation terminated.
make[2]: *** [src/CMakeFiles/stegseek_lib.dir/build.make:90: src/CMakeFiles/stegseek_lib.dir/Arguments.cc.o] Error 1
make[1]: *** [CMakeFiles/Makefile2:118: src/CMakeFiles/stegseek_lib.dir/all] Error 2
make: *** [Makefile:146: all] Error 2