Steghide

Hide/extract data inside images and audio.

KaliParrotLinuxpassive

pkg: steghide

Steghide embeds and extracts hidden data in JPEG/BMP/WAV/AU files, optionally protected by a passphrase.

Syntax

steghide {embed|extract} -sf {file}

Example

steghide extract -sf image.jpg

Attempts to extract hidden data from image.jpg (prompts for a passphrase).

Options & flags

What each switch does. Toggle them in the builder below to assemble a command.

embedHide data into a cover file.
extractExtract hidden data.
-sf <image.jpg>Stego file (carrier).
-ef <secret.txt>Embed file (the secret).
-p <pass>Passphrase.

Command builder

Tick options (and fill any values) to build a ready-to-copy command.

steghide

Usage examples

steghide extract -sf image.jpg

Extract hidden data (prompts for passphrase).

steghide embed -cf cover.jpg -ef secret.txt

Hide secret.txt inside cover.jpg.

Advantages
  • Classic steganography toolkit
  • Passphrase-protected payloads
  • Common in CTFs/forensics
Disadvantages
  • Limited file-format support
  • Needs the passphrase to extract
  • Detectable by stego-analysis
Tags
#steganography#ctf

Official docs: Steghide

Related commands

Frequently asked questions

What is Steghide used for?
Steghide embeds and extracts hidden data in JPEG/BMP/WAV/AU files, optionally protected by a passphrase.
What is an example Steghide command?
A common example is: steghide extract -sf image.jpg — Attempts to extract hidden data from image.jpg (prompts for a passphrase).
Is Steghide part of Kali Linux?
Yes. Steghide ships with Kali Linux (and Parrot OS). If missing, install it with: sudo apt install steghide.
What category of security tool is Steghide?
Steghide is a Forensics tool with a passive-risk profile when run against a live target.

Try recon tools live

Run real scans against a domain you control, stage by stage.

Open the lab →