Simple C++ Encryption and Steganography tool that uses Password-Protected-Encryption to secure a file's contents, and then proceeds to embed it inside an image's pixel-data using Least-Significant-Bit encoding. For Linux, MacOS, and Windows systems. - Encoding $ ./steganography encode -i data/orig.png -e data/jekyll_and_hyde.zip -o output.png - Password: 1234 - Image size: 640x426 pixels - Encoding level: Low (Default) - Max embed size: 132.38 KiB - Embed size: 61.77 KiB - Encrypted embed size: 61.78 KiB - Generated CRC32 checksum - Generated encryption key with PBKDF2-HMAC-SHA-256 (20000 rounds) - Encrypted embed with AES-256-CBC - Embedded jekyll_and_hyde.zip into image - Successfully wrote to output.png - Original image: Image with embedded ZIP containing the entire contents of the book 'Dr Jekyll and Mr Hyde' - Decoding $ ./steganography decode -i output.png -o 'out - jekyll_and_hyde.zip' - Password: 1234 - Image size: 640x426 pixels - Generated decryption key with PBKDF2-HMAC-SHA-256 (20000 rounds) - Successfully decrypted header - File signatures match - Detected embed jekyll_and_hyde.zip - Encoding level: Low (Default) - Encrypted embed size: 61.78 KiB - Successfully
FEATURES
ALTERNATIVES
A unified data security platform that discovers, classifies, monitors, and protects sensitive data across cloud, SaaS, and on-premises environments while ensuring compliance and automating security processes.
A network-based panic button to overwrite LUKS header and shutdown the computer in emergencies, making data recovery impossible.
Steganography brute-force utility with performance issues, deprecated in favor of stegseek.
Tang is a server for binding data to network presence, providing an easy and secure alternative to key escrow.
steg86 is a format-agnostic steganographic tool for x86 and AMD64 binaries.
GPG Sync is a tool designed to keep OpenPGP public keys up-to-date within an organization by offloading the complexity of key management to a single trusted person.
PINNED

Mandos Brief Newsletter
A weekly newsletter providing cybersecurity leadership insights, industry updates, and strategic guidance for security professionals advancing to management positions.

PTJunior
An AI-powered penetration testing platform that autonomously discovers, exploits, and documents vulnerabilities while generating NIST-compliant reports.

CTIChef.com Detection Feeds
A tiered cyber threat intelligence service providing detection rules from public repositories with varying levels of analysis, processing, and guidance for security teams.

ImmuniWeb® Discovery
ImmuniWeb Discovery is an attack surface management platform that continuously monitors an organization's external digital assets for security vulnerabilities, misconfigurations, and threats across domains, applications, cloud resources, and the dark web.

Checkmarx SCA
A software composition analysis tool that identifies vulnerabilities, malicious code, and license risks in open source dependencies throughout the software development lifecycle.

Orca Security
A cloud-native application protection platform that provides agentless security monitoring, vulnerability management, and compliance capabilities across multi-cloud environments.

DryRun
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.