image-containing-steganography
Image containing a hidden file using steganography techniques

In this post we’ll explain a simple method to hide data (any type of data – text, image, malware, etc.) in a JPEG. This is a form of steganography. Steganography is the art and science of hiding something in plain sight. Why hide something in plain sight – overtly hide something? To not tip anyone off that there is a secret message or hidden data.

This post focuses on a technique, rather than a history lesson on steganography, so on to the gist…

1. Download and extract the JPHS (JPEG Hide and JPEG Seek) tool:

2. Download a cover image (the image you will hide the data inside of) and a hide image (the image you will hide inside the cover image):

The cover image should be roughly 10 times the size of the hide image.  In our example, we will use a HD Background as the cover image and a picture of a cute kitten as the hide image.

  • Cover Image – background.jpg (found doing a Google search for “hd backgrounds”):

 Source: http://hdgreatimages.com/wp-content/uploads/2016/04/Bridge-HD-Backgrounds.jpg Source: http://hdgreatimages.com/wp-content/uploads/2016/04/Bridge-HD-Backgrounds.jpg

  • Hide Image – kitten.jpg (found doing a Google search for “lilbub”):

 Source: https://pbs.twimg.com/profile_images/466984253255729152/8yMo8O4K.jpeg

jphide and jpseek

3. Run Jphswin. Accept the terms. Do the following:

Click on “Open jpeg”, select “background.jpg” and click “open”:

 Selecting the Input (Cover) file in JPHS for Windows
Selecting the Input (Cover) file in JPHS for Windows

 

Click on “Hide”, enter a passphrase, click “OK”, then select the hide file (kitten.jpg), and click “Open”:

 Selecting the Hide file in JPHS for Windows
Selecting the Hide file in JPHS for Windows

 

Save the steg’d file (the kitten.jpg file hidden in the background.jpg file) as another file name, so we can compare the new file containing the hidden data with the original file. Click “Save jpeg as” and use the file name “bridge.jpg” (or something different than the original name):

 Saving the Steg'd file in JPHS for Windows
Saving the Steg’d file in JPHS for Windows

 

You should now see 3 files – the “background.jpg” should look the same (to the naked eye) as the “bridge.jpg” even though the “kitten.jpg” file is hidden inside “bridge.jpg”:

stego'd images

Open both “background.jpg” and “bridge.jpg” side-by-side in Windows Photo Viewer to see if you can tell a difference:

 Original image on the left. Steg'd image on the right. Can you see any difference?
Original image on the left. Steg’d image on the right. Can you see any difference?

Congratulations! You’ve just practiced steganography.

Validation

Let’s validate our steganography demonstration actually worked by extracting the “kitten.jpg” from the “bridge.jpg”:

Using JPHS for Windows, select “Open jpeg”, select “bridge.jpg”, click “Open”:

Opening the image containing the hidden file in JPHS for Windows

After you opened the “bridge.jpg” file click on “Seek”, enter the passphrase you used to hide the file, click “OK”, then save the hidden file as “secret.jpg”:

 Saving the hidden file as
Saving the hidden file as “secret.jpg” in JPHS for Windows

 

Verify the “secret.jpg” file is the same as the “kitten.jpg” file by opening “secret.jpg”.

 The extracted image
The extracted “secret.jpg” is the same as “kitten.jpg”. Our steganography example worked!

 

To validate which image pixels JPHS for Windows modified to hide the image in the cover image, you can use Beyond Compare to visually depict the differences. Download and install Beyond Compare.  If you receive an “Error creating registry key:” you need to install as an Administrator.

Run Beyond Compare. On the left side, select “New”, the double-click “Picture Compare”:

 Double-click Picture Compare
Double-click Picture Compare

 

Open the original picture (background.jpg) on the left window in Beyond Compare and open the steg’d picture (bridge.jpg) on the right window.  The comparison should be in the bottom window:

 One example of where the pixels differ is shown above - the pixel on the left has RGB:47,109,184, on the right it is RGB:47,109,186
One example of where the pixels differ is shown above – the pixel on the left has RGB:47,109,184, on the right it is RGB:47,109,186

 

Resources

Files used/referenced in this blog: