Notifications
Clear all

Stegbreak

15 Posts
5 Users
0 Reactions
5,132 Views
(@farmerdude)
Estimable Member
Joined: 20 years ago
Posts: 242
 

Harlan,

See my post above - it appears the original poster with the question did not specify the location of the "rules.ini" file, and as a result stegbreak looks in the default path (Linux). His subsequent post shows he's now specifying the location of the "rules.ini" file and so the application executes.

qtorqersen,

If the password was returned stegbreak was successful in its attack. You might want to read the PDF that comes with the archive - it details the options, what is returned, etc.

Cheers!

farmerdude

www.forensicbootcd.com

www.onlineforensictraining.com


   
ReplyQuote
(@gtorgersen)
Trusted Member
Joined: 17 years ago
Posts: 70
Topic starter  

The jph file that was returned by the application just contains garbage data. I think that it is a false positive.


   
ReplyQuote
(@Anonymous)
Guest
Joined: 1 second ago
Posts: 0
 

Try it again without the -c flag

If stegbreak is successful, it should print the password to the screen.


   
ReplyQuote
(@ams147)
Active Member
Joined: 16 years ago
Posts: 5
 

hi,

I ran stegbreak -r rules.ini -t p abc.jpg in windows, but i got an error message
fopen /usr/share/dict/words No such file or directory

does anyone know how to tackle this?


   
ReplyQuote
(@Anonymous)
Guest
Joined: 1 second ago
Posts: 0
 

It's looking for the dictionary file. Do you have a dictionary file to run with it? If so, you can tell stegbreak to use that dictionary file like so

$ ./stegbreak -r rules.ini -f dictionary.txt -t p abc.jpg

If you don't want to specify the file every time, simply move it to /usr/share/dict/words like so

$ mkdir /usr/share/dict
$ mv dictionary.txt /usr/share/dict/words


   
ReplyQuote
Page 2 / 2
Share: