unforum

[Unfeltkisss]

i'm trying to find a higher version of hiderman right now. I've found cracks for versions up to around 4.2 i think so ne would think that it's out there somewhere right?

[shimanotaka]

[Unfeltkisss]

ya i used about 4 or 5 different search engines, too many different combinations of search words, and a ton of torrent sites (demonoid, isohunt, torrentspy, pirate bay, torrentbox, etc, etc)



get to cracking brotha! haha

//K

p.s. ya you should register

[taureanfreak]

well, in the "View Sorce" I found these words "forid, safe, radio, and client" maybe those are the password needed? I can't use anything... still in phoenix by a fluke. bad weather is keeping me here. I'll be happy to go password hunting with anyone though

[Enoch]

 Bad Weather

[Unfeltkisss]

well just for safety's sake and your ease of mind Tau, I tried the answers for you.

No dice.

There's something encrypted in the image that we need to get out of it.

[shimanotaka]

I'm getting nowhere with the cracking of the Hiderman 4.1.4 RAR-file. Best results I've seen is around 14 tried passwords/second. With a password of only 8 characters, it'd still take half an eternity even if I kept my computer turned on 24/7.

Assuming that the StegSpy program was correct, we'd have to find this higher version of Hiderman program somewhere. Does anyone have configured access to UseNeXT or DC++? Hiderman might be available there.

There might also be some way to reverse engineer the encryption of the 4K.png file if we knew the password. I haven't looked into this option too much though.

Still, we have to consider the possibility that the steg signature in the png-file might just be a dead-end to throw us of track.

[Unfeltkisss]

that's possible shim. (throwing us off course)
I'm not too good with the whole cracking thing, but if you want to get me the rar file and a decent cracker I'll run it on my comp too to help out

[WolfHawk]

[Unfeltkisss]

current versions of what? hiderman?

[WolfHawk]

The current versions of whatever it is they need to de-steg the image.

For example: the image says version X, but the only ones available right now are versions T, U, and V.

Have they tried versions T, U, or V? Or are they assuming they have to use version X because the image has an X in it?

If the image says version X can that information have been inserted after the fact by erasing the T, U, or V and typing an X instead?

I know nothing about stegging and destegging so I have no idea if what I have suggested is even possible.

[notgordian]

Can't we just try to guess the passwords using the clues?

We know there are four keys, and there can be some order assigned to them.

That either means there are four stegged clues contained in the file, or the same image is stegged four ways and the "order" we input the password matters.

Possibilities to consider for passwords:

LOCATIONS: Florida Keys, Key West, etc.
WORDS: Monkey, Donkey, Turkey et. al.
MUSIC: A (minor/major) through G

I think our key to solving this rests in the hint that order doesn't matter--it means there IS an order behind the four keys.

[shimanotaka]

WolfHawk,

The problem is that StegSpy says that there is a Hiderman signature in the png-file while Hiderman v3.0 says that there is no file hidden in the png-file.

That made me assume that a file has been hidden by a higher version of Hiderman, that StegSpy can detect, but Hiderman v3.0 can't extract. And any higher version of Hiderman than v3.0 seems close to impossible to get a hold of.

notgordian might have a point though. What if several files where hidden in the png-file, using different steg programs? One program might alter the data of a previous one, but the signature that StegSpy is looking for might still be intact, even if the rest of the data is garbled. And maybe StegSpy only reports the first steg sig it finds and then stops looking?

So we would have to extract each file in the reverse order that they were inserted. Still, this is just a loose theory...

[Unfeltkisss]

i think it's a theory worth giving a shot though

[shimanotaka]

I just sent a mail to the person that has written StegSpy asking what he thinks of our theories and if he has any idea on where to find a higher version of Hiderman. Let's hope he replies...