General

Steganography

Steganography is the practice of hiding a file, message, image, or video within another file, message, image, or video.

# Detect hidden data
zsteg <file>
steghide info <file>

# Extract hidden files embedded into media files
steghide extract -sf <file> -p <password>

# Crack steghide encoded files
stegseek <file> wordlist.txt
stegcracker <file>

Images

# Extract EXIF info
exiftool <file>

# Decode QR Code
zbarimg <file>

PDFs

# Inspect PDF files and find malformed elements
pdf-parser.py -v <file>

# PDF to text
pdftotext <file>

Video

# Steganography in WAV audio files
python3 wav-steg.py -r -s <file.wav> -o a -n 1 -b 1000

# Dump audio file spectrogram
sox <file> -n spectrogram 

Spectrogram

Visual representation of the frequency spectrum of a signal over time.
Also known as sonographs, voiceprints, or voicegrams.

Note: Audio files can store data in various forms, including voice notes and visual graphs.

# Tools
- Audacity
- Sonic Visualiser
- dcode.fr/spectral-analysis to view the hidden message inside

Memory Analysis

GitHub - volatilityfoundation/volatility3: Volatility 3.0 developmentGitHub

Extract Macro

python3 -m pip3 install oletools
olevba file.xlsx