SecPod

Learn Search

Search across all Learn content

← Back to Expressions & POVs
Steganography

Steganography

Steganography is an art of hiding a message, image, or file within another message, image, or file.

Oct 30, 2013By Thanga Prakash2 min read

Steganography is an art of hiding a message, image, or file within another message, image, or file.

Most images are used to hide the data. The flexibility of using images means that information can be hidden in a variety of ways. It can be scattered all over the image or inserted straight inside.

If data is inserted straight inside. we can find it easily using the below technique,

Hex Editor

like HexEdit, HxD on windows

using :%!xxd command on Linux

FF D8

FF D9

EOI (End Of Image) marker

Here is an example to insert data straight inside the image without any tool on windows:

  1. Create a test file with some data to hide. ( Here i used “hidden data.txt” )
  2. Take an image to which you need to hide. ( Here i used “original.jpg” )
  3. In Command prompt use the below command to hide the content.

copy /b original.jpg + "hidden data.txt" "hidden image.jpg"

A new image will be created with your data hidden. You can open and view that image normally.

But, to view the hidden content open that image in any Hex editor as mentioned above and see the hidden data at the end after the EOI marker.

Later, a quick obfuscation layer is added (Password or key) to hide the visibility of the data in the HEX format. To view the original message we need that key or password.

Here is an example to insert data inside the image using Outguess tool:outguess is one of the tool that allows the insertion of hidden information intothe redundant bits of data sources.

Data Hiding : outguess -k "secretkey" -d hidden.txt image.jpg out.jpg

Data Retrieval : outguess -k "secretkey" -r out.jpg hidden.txt

– Thanga Prakash

Featured Posts

Open Everything You Need to Know About AI-Assisted Cyberattacks and How to Stop Them
Everything You Need to Know About AI-Assisted Cyberattacks and How to Stop Them

Point of View

Everything You Need to Know About AI-Assisted Cyberattacks and How to Stop Them

AI has removed the skill barrier that used to keep amateurs out of serious cybercrime, letting first-time attackers pull off major breaches using chatbots and agentic AI tools. The blog covers the main attack types (AI phishing, deepfakes, AI-generated malware, agentic extortion) with 2025-2026 data, and argues that defense now depends on patching by actual exposure, not static severity scores, across both endpoints and cloud.

Aug 18, 2026

Open Key Considerations While Choosing a CNAPP Platform for Enterprise Cloud Security
Key Considerations While Choosing a CNAPP Platform for Enterprise Cloud Security

Point of View

Key Considerations While Choosing a CNAPP Platform for Enterprise Cloud Security

Aug 17, 2026

Open Top AI Cybersecurity Vendors in 2026
Top AI Cybersecurity Vendors in 2026

Point of View

Top AI Cybersecurity Vendors in 2026

Aug 17, 2026

Open Cybersecurity AI Automation in 2026 and What It Changes in the SOC
Cybersecurity AI Automation in 2026 and What It Changes in the SOC

Point of View

Cybersecurity AI Automation in 2026 and What It Changes in the SOC

Aug 17, 2026