Paradoxis / StegCracker

Steganography brute-force utility to uncover hidden data inside files
https://blog.paradoxis.nl/stegcracker-2-released-f03771ba855b
MIT License
551 stars 106 forks source link

Stegcracker Not Finding Known Password #9

Closed wallofsheep closed 5 years ago

wallofsheep commented 5 years ago

Did the following with the same issue noted in the original bug ticket.

Updated to the latest: pip3 install stegcracker -U --force-reinstall

steghide embed -cf image.jpg -ef secret.txt created a password of "password" and several other words in it for testing.

created a file named dict.txt with the word "password" in it. ran: stegcracker image.jpg dict.txt Error: Failed to crack file, ran out of passwords.

Tried downloading tom.txt and using a password from that file with a image.jpg and I get the same error.

Originally posted by @wallofsheep in https://github.com/Paradoxis/StegCracker/issues/4#issuecomment-476894231

Paradoxis commented 5 years ago

Did you remove the previous installation of stegcracker? You can test this by running:

cat $(which stegcracker) 

It should return the contents of a Python script If the output is the latest verison, try running it with the --verbose option

wallofsheep commented 5 years ago
root@test:~/stegcracker_test# cat $(which stegcracker) 
#!/usr/bin/python3
# -*- coding: utf-8 -*-
import re
import sys

from stegcracker.__main__ import main

if __name__ == '__main__':
    sys.argv[0] = re.sub(r'(-script\.pyw?|\.exe)?$', '', sys.argv[0])
    sys.exit(main())

StegCracker - (https://github.com/Paradoxis/StegCracker) Copyright (c) 2019 - Luke Paris (Paradoxis)

usage: stegcracker [] stegcracker: error: the following arguments are required: file

Paradoxis commented 5 years ago

Could you add the file & worslist you’re using? I’ll look into it after I wake up :) (Extra info like platform you’re using and the expected password etc is appreciated)

wallofsheep commented 5 years ago

Attached is image.jpg

The password is "th" - I used tom.txt from the example that worked (also attached).

Platform: Kali Linux (latest weekly distrib running in VMWare)

Thanks

tom.txt

image

Paradoxis commented 5 years ago

Fixed your issue in commit cf3b8b5, passwords weren't being stripped when passed to the cracker, releasing it in a bit :)