SecPod

Learn Search

Search across all Learn content

← Back to Expressions & POVs
Steganography

Steganography

Steganography is an art of hiding a message, image, or file within another message, image, or file.

Oct 30, 2013By Thanga Prakash2 min read

Steganography is an art of hiding a message, image, or file within another message, image, or file.

Most images are used to hide the data. The flexibility of using images means that information can be hidden in a variety of ways. It can be scattered all over the image or inserted straight inside.

If data is inserted straight inside. we can find it easily using the below technique,

Hex Editor

like HexEdit, HxD on windows

using :%!xxd command on Linux

FF D8

FF D9

EOI (End Of Image) marker

Here is an example to insert data straight inside the image without any tool on windows:

  1. Create a test file with some data to hide. ( Here i used “hidden data.txt” )
  2. Take an image to which you need to hide. ( Here i used “original.jpg” )
  3. In Command prompt use the below command to hide the content.

copy /b original.jpg + "hidden data.txt" "hidden image.jpg"

A new image will be created with your data hidden. You can open and view that image normally.

But, to view the hidden content open that image in any Hex editor as mentioned above and see the hidden data at the end after the EOI marker.

Later, a quick obfuscation layer is added (Password or key) to hide the visibility of the data in the HEX format. To view the original message we need that key or password.

Here is an example to insert data inside the image using Outguess tool:outguess is one of the tool that allows the insertion of hidden information intothe redundant bits of data sources.

windows-copy-cmd
windows-copy-cmd
Hex view
Hex view

“Data Hiding : outguess -k "secretkey" -d hidden.txt image.jpg out.jpg”

outguess-hide
outguess-hide

“Data Retrieval : outguess -k "secretkey" -r out.jpg hidden.txt”

Data-Retrive
Data-Retrive

– Thanga Prakash

Featured Posts

Open What Is a Kubernetes Network Policy?
What Is a Kubernetes Network Policy?

Point of View

What Is a Kubernetes Network Policy?

A Kubernetes network policy controls incoming and outgoing connections between Pods and other network destinations. The article explains how ingress and egress rules work, why default network access can create security risks, and how to configure and verify traffic restrictions. It also covers common policy mistakes and how Saner COSP's COAE and COPM modules support Kubernetes exposure visibility and configuration assessment.

Oct 16, 2026

Open Hybrid Cloud Security for Kubernetes Across Standalone, On-Prem, and Managed Clusters
Hybrid Cloud Security for Kubernetes Across Standalone, On-Prem, and Managed Clusters

Point of View

Hybrid Cloud Security for Kubernetes Across Standalone, On-Prem, and Managed Clusters

Hybrid cloud security for Kubernetes involves managing security risks across standalone, on-premises, and managed clusters. The blog explains the differences between Amazon EKS, Microsoft AKS, and Google GKE, common security challenges, and practical steps for maintaining consistent security controls. It also covers how Saner COSP helps teams assess configurations, manage access, prioritize risks, and track remediation across Kubernetes environments.

Oct 16, 2026

Open Excellence Is a Choice
Excellence Is a Choice

Point of View

Excellence Is a Choice

Oct 14, 2026

Open AWS Security Best Practices for Financial Services: Beyond Configuration Management
AWS_Security_Best_Practices_For_Financial_Services

Point of View

AWS Security Best Practices for Financial Services: Beyond Configuration Management

Oct 13, 2026