stegextract Logo

stegextract

0
Free
Visit Website

Stegextract is a Bash script that extracts hidden files and strings from images, supporting PNG, JPG, and GIF formats. It extracts any trailing data after the image's closing bytes and any hidden files embedded within the image. The tool relies on magic numbers, hexdumps, and binary data alone, and does not support Steganography related to color/pixel/filter/LSB. Note that short byte combinations might create false positives, and manual review of the hexdump may be necessary in complex cases.

FEATURES

ALTERNATIVES

A Mac OS X forensic utility for ensuring correct forensic procedures during disk imaging.

libevt is a library to access and parse Windows Event Log (EVT) files.

Truehunter is a tool designed to detect encrypted containers with a focus on Truecrypt and Veracrypt, utilizing a fast and memory efficient approach.

A suite of console tools for working with timestamps in Windows with 100-nanosecond precision.

A forensic analysis tool that extracts and parses logs, notifications, and system information from iOS/iPadOS devices and backups.

A digital forensics tool that provides read-only access to file-system objects from various storage media types and file formats.

A library to access the Windows New Technology File System (NTFS) format with read-only support for NTFS versions 3.0 and 3.1.

Free software for extracting Microsoft cabinet files, supporting all features and formats of Microsoft cabinet files and Windows CE installation files.