Lab – Using Steganography
Objectives
Use steganography to hide a document within a JPEG file.
Background / Scenario
Steghide is an open source steganography program that hides data in various types of files such as audio
and image files. You are going to hide a data file within an image file.
Required Resources
• PC with Ubuntu 16.04 Desktop LTS installed in a VirtualBox or VMware virtual machine
Step 1: Open a terminal window in Ubuntu.
a. Log in to Ubuntu using the following credentials:
User: cisco
Password: password
b. Click on the terminal icon to open a terminal.
Step 2: Run Steghide.
a. At the command prompt, enter the following command to change to the Downloads directory:
cisco@ubuntu:~$ cd Downloads/
b. Enter libreoffice secret.odt & at the prompt.
Page 1 of 5
Lab – Using Steganography
cisco@ubuntu:~/Downloads$ libreoffice secret.odt &
What is the message in the secret.odt?
The secret document
Close the secret.odt file when done.
c. Enter gimp keyboard.jpg & at the prompt to view the image file
cisco@ubuntu:~/Downloads$ gimp keyboard.jpg &
d. Close the keyboard.jpg file when done.
e. At the command prompt, enter the following command :
cisco@ubuntu:~/Downloads$ steghide embed -cf keyboard.jpg -ef secret.odt
This command takes the jpeg file called “keyboard.jpg” and uses it as a carrier to embed the document,
secret.odt, into it.
f. When prompted for a passphrase, use Cisco. Re-enter the passphrase when prompted.
g. You have embedded the document, secret.odt, into the image file, keyboard.jpg.
h. Open the files, secret.odt and keyboard.jpg. Did these files change?
Well, visually nothing is noticed by me. However, it said that that those files were embedded.
Step 3: Verify the hidden file.
a. Type the following command in terminal.
cisco@ubuntu:~/Downloads$ steghide info keyboard.jpg
b. Type y at the prompt. (Do not press Enter).
c. Enter the passphrase Cisco and press Enter.
d. The results below shows that the file, secret.odt, is encrypted and compressed.
Step 4: Extract the hidden file.
a. Type the following command in terminal.
cisco@ubuntu:~/Downloads$ steghide extract -sf keyboard.jpg
Page 2 of 5
Lab – Using Steganography
b. Enter the passphrase, Cisco, and press Enter.
c. Enter y when prompted to overwrite the existing secret.odt file with the new extracted secret.odt file.
d. You have extracted the file. Open the extracted secret.odt file with LibreOffice.
Could you open the file? Is the secret message the same as before?
Yes, the message was the same as before.
References
Steghide: http://steghide.sourceforge.net/
Step 2:
Page 3 of 5
Lab – Using Steganography
Step3
Page 4 of 5
Lab – Using Steganography
Step 4:
Page 5 of 5
