skills.rest
lNwNl
lNwNlCOMMUNITY
Explore all skills by this author →
GitHub

steganography-techniques

Detect and extract hidden data from images, audio, files, and text using steganography tools.

Updated Jun 5, 2026
Search Tags:#ctf#steganography#forensics#binwalk#steghide#zsteg#lsb extraction
One-click install
npx skills add https://github.com/lNwNl/Praxis --skill steganography-techniques-lnwnl
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: steganography-techniques
Source: https://github.com/lNwNl/Praxis/tree/main/skills/steganography-techniques
Command: npx skills add https://github.com/lNwNl/Praxis --skill steganography-techniques-lnwnl

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve? Hidden data embedded in images, audio, files, or text is easy to miss without a systematic approach. This Skill provides a file-type-driven playbook for detecting and extracting steganographic content, covering the tools and commands needed for each carrier format in CTF and forensic analysis scenarios. ## Core Features & Use Cases - Image Steganography Analysis: LSB extraction with zsteg and StegSolve, PNG chunk and CRC-dimension tricks, JPEG steghide/jsteg extraction, EXIF metadata inspection, and GIF palette analysis. - Audio & File Steganography: Spectrogram inspection, DTMF and morse decoding, WAV LSB extraction, polyglot detection, binwalk/foremost carving, NTFS ADS reading, and steghide passphrase cracking with stegseek. - Text Steganography & Decision Tree: Whitespace (stegsnow), zero-width Unicode, and homoglyph detection, plus a decision tree that routes any suspicious file to the right analysis workflow. - Use Case: During a CTF challenge you receive a suspicious PNG. Follow the decision tree to run exiftool, pngcheck, zsteg, and binwalk in sequence, then brute-force the correct image dimensions via CRC to reveal hidden rows containing the flag. ## Quick Start Analyze the attached image file for hidden steganographic data and extract any concealed content.

Frequently Asked Questions about steganography-techniques

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I detect LSB steganography in PNG images?▼

Use zsteg to auto-detect LSB patterns in PNG and BMP files, running 'zsteg image.png -a' to try all known methods. StegSolve provides visual bit-plane inspection, and stegoveritas runs a comprehensive automated scan including LSB extraction.

How to extract hidden data from JPEG files with steghide?▼

Run 'steghide extract -sf image.jpg' to extract embedded data, adding '-p password' if a passphrase is known. Check whether data is embedded first with 'steghide info image.jpg', and use jsteg for JPEG LSB-based hiding.

What tool cracks steghide passwords fastest?▼

stegseek is the fastest steghide passphrase cracker, roughly 10000x faster than stegcracker, using a wordlist like rockyou.txt. It also supports a seed mode to attempt extraction without a wordlist.

Can audio files hide data and how do I find it?▼

Audio steganography hides data via spectrogram patterns, LSB encoding, DTMF tones, morse code, or SSTV images. View spectrograms in Sonic Visualiser or Audacity, decode DTMF with multimon-ng, and extract WAV LSB data with WavSteg.

How do I find hidden text in a text file?▼

Check for whitespace encoding with 'cat -A' and stegsnow, zero-width Unicode characters (U+200B, U+200C, U+200D, U+FEFF) with a Python ordinal scan, and homoglyph substitution by detecting non-ASCII characters that look identical to Latin letters.

Why does binwalk matter for steganography analysis?▼

binwalk scans any file for embedded files and appended data, which is essential for detecting polyglot files and data hidden after legitimate content. Use 'binwalk -e' to extract embedded files and foremost for file carving when binwalk misses content.

Related Skills

Explore More Software Engineering Skills→
wgpsecwgpsec
1.6k

ctf-forensics

Triage and analyze disk images, memory dumps, PCAP captures, and stego media.

Official
Advanced
bingookbingook

classical-cipher-analysis

Identify and decrypt classical ciphers from CTF challenges using Python.

Community
Advanced
kiwamizamuraikiwamizamurai
7

forensics

Extract hidden data and forensic artifacts from files using standard tools.

Community
Advanced
liangdabiaoliangdabiao
264

growth-model-analyzer

Evaluate growth experiments and campaigns using statistical tests and uplift modeling.

Community
Advanced