unforum

StreetPreacher · Boot Joined: 14 Oct 2003 Posts: 32

[PUZZLE] Steg passphrases?

**Posted:** Tue Oct 14, 2003 6:11 pm

AnthraX101 · Entrenched Joined: 18 Mar 2003 Posts: 797

Are you sure these results are accurate? I grabbed a copy of all jpegs on the server and got the following:

**Posted:** Tue Oct 14, 2003 7:50 pm

StreetPreacher · Boot Joined: 14 Oct 2003 Posts: 32

I started at default level StegDetect V5 and I got the same results you did. Then I bumped it up to level 3, 7 and then 10. As I bumped it up the same files came up being detected as positives. The more I bumped it up the more likely an image was to be steged. (As level 3 they showed up as jphide(*) at level 7 it was jphide (**) and at 10, jphide (***))

This is the reason I wanted to see if anyone else had figured out any passphrases, so I could either confirm my findings or move on. It looks like a lot of people suspect stegging but we can't either prove or disprove it.

I just wish there was a reliable way to try and brute force them...

**Posted:** Tue Oct 14, 2003 10:18 pm

AnthraX101 · Entrenched Joined: 18 Mar 2003 Posts: 797

I have tried using stegbreak (hey, the PMs started it with the bruting! Smile

) I was unable to find any passwords. I suspect that the contest.jpg is probably a plant. Smile

However, whenever you turn up the default sensitivity of stegdetect, you are likely to get false positives. Steganography isn't like most things, binary true or false. Its very nature is to remain hidden. Therefore you can only get a hint of it. I usualy find that stegdetect is adequate with its default sensitivity.

AnthraX101

**Posted:** Tue Oct 14, 2003 10:30 pm