Notifications
Clear all

Stegbreak

15 Posts
5 Users
0 Likes
2,914 Views
(@gtorgersen)
Posts: 70
Trusted Member
Topic starter
 

I am using stegbreak in Windows on a file that stegdetect found to have hidden data. But I get an error when attempting to use stegbreak stating that

stegbreak -t p 8.jpg
fopen /usr/local/share/stegbreak/rules.ini No such file or directory

Of course that directory doesnt exist I am using windows. Does anyone know a work around or another soluiton for this?

 
Posted : 06/01/2009 2:15 am
keydet89
(@keydet89)
Posts: 3568
Famed Member
 

Google? I did a quick search and found several posts w/ solutions…

 
Posted : 06/01/2009 3:30 am
(@gtorgersen)
Posts: 70
Trusted Member
Topic starter
 

What did you search for can you provide a link.

 
Posted : 06/01/2009 3:40 am
keydet89
(@keydet89)
Posts: 3568
Famed Member
 

www.google.com

stegbreak rules.ini

 
Posted : 06/01/2009 4:02 am
(@gtorgersen)
Posts: 70
Trusted Member
Topic starter
 

I guess I just cannot find it. Anyways I will just put it in a Linux and do it like that probably faster anyways.

Thanks for your help.

 
Posted : 06/01/2009 8:05 am
(@farmerdude)
Posts: 242
Estimable Member
 

gtorgersen,

As you're running stegbreak in Windows do you not have to pass the location of the "rules.ini" file? Such as

stegbreak -r rules.ini -t p 8.jpg

And this would indicate that "rules.ini" file is in the current working directory?

Cheers!

farmerdude

www.forensicbootcd.com

www.onlineforensictraining.com

 
Posted : 08/01/2009 7:21 pm
(@gtorgersen)
Posts: 70
Trusted Member
Topic starter
 

I figured it out. Thanks for the help.

 
Posted : 08/01/2009 7:40 pm
(@gtorgersen)
Posts: 70
Trusted Member
Topic starter
 

Another questions. Everytime I run the command

stegbreak -r RULES.ini -t p -c "FILE PATH"

I get an output of a .jph file. What is this file and how do I know if the application was successful in breaking the password?

 
Posted : 09/01/2009 2:12 am
keydet89
(@keydet89)
Posts: 3568
Famed Member
 

I figured it out. Thanks for the help.

Care to share?

 
Posted : 09/01/2009 3:00 am
(@gtorgersen)
Posts: 70
Trusted Member
Topic starter
 

Sure gtorgersen@dsionline.biz and we can do it offline. We will report our finds back to anyone who is interested when done.

 
Posted : 09/01/2009 3:10 am
Page 1 / 2
Share: