PRESENTED BY:

NAME-Prabhu Manikandan V
ROLL-R134219072
BRANCH-CSE-CSF
SAP-500075387
SEM-05
BATCH-03
 
 
 
Lab Exercise 7: Steganography, Watermarking and File Carving

i. Perform data hiding and data extraction using OpenStego

(https://www.openstego.com/)
Installing openstego

Hidden message in a file

Hiding data
Extracting the file

Extracted file
ii. Perform watermarking using OpenStego (https://www.openstego.com/)
Generating sign

Embed watermark

Verifying Watermark
iii. Install DeepSound tool from: http://jpinsoft.net/deepsound/ Hide data in an audio file
using DeepSound tool
Installing deepsound

Secret message file

Adding secret file in .wav file

Decode the data

Decoded file
Check the integrity of data before encoding and after decoding.

By uploading the file before and after encoding in virus total we can see there is change so there
is something happed in the file in between
iv. Perform Steganography and File Carving using HxD Editor

(http://mh-nexus.de/en/downloads.php?product=HxD)
Steps:-
1. Use two .jpg images, image1 and image 2.
Images used

2. Open image2 using HeX Editor

3. Look at the first four bytes of data of the image. Can you see FF D8 FF E0 in hex, or
ÿØÿà in ASCII?

4. Rename image2.jpg into image2.mp3 see what happens.

5. Re-open that changed mp3 file with HxD
By reopening I can see nothing changed because file extension doesn’t change the file
format.

6. To validate your assumption, just change the file extension to .jpg and see what it has in
store for you. Else, just open that mp3 file with your default image viewer.

7. Try to addsome data to image2.jpg - a simple text line will do. To do it, just open your
image2.jpg file in HxD. At the end of the file, add some content - A statement will do.
Just save the file with any name with extension .jpg. Save it with image2.jpg itself. Open
image2.jpg with HxD and see what you find.
And still there is no change in header

Now: Hide image1.jpg into image2.jpg

8. Open both the files in HxD. Hit 'Ctrl + N' to open a new blank window. Copy the whole
content from image2.jpg and paste it into the new window. Copy the whole content from
image1.jpg and paste it at the end of the file in the new window. Save as magic.jpg. Thats
it! Now check how the thumbnail looks like in the place where you saved magic.jpg. Try
opening it in your image viewer. Do you see image2 anywhere in the pic?
Even adding hex behind doesn’t change the thumbnail of the image 1

Apply file carving technique now

9. Open magic.jpg in HxD.
10. Now hit 'Ctrl + F' and type in "ÿØÿà" (without quotes) and hit enter. Hit F3 to find next
match.

11. Try to retrieve / extract that image data now.

I pasted the second part in new file
12. Save the new file as magic revealed.jpg.

13. Open 'magic revealed.jpg' in your image viewer. What do you see?
Now I see the hex of image 1