
Steganography Techniques
This is your systematic playbook for finding hidden data in files. It walks through LSB extraction in images with zsteg and StegSolve, JPEG steganography via steghide and jsteg, audio spectrogram analysis for visual patterns, DTMF decoding, polyglot file detection with binwalk, and text steganography using whitespace or zero-width Unicode. The structure is file-type-first, which matters because you need different tools and workflows for PNG chunks versus JPEG DCT coefficients versus WAV appended data. It includes the CRC dimension mismatch trick for PNG and concrete extraction commands. If you're doing CTF forensics or security analysis where you suspect hidden payloads, this gives you the methodical checklist base models typically fumble through trial and error.
- skills.sh installs
- 3.7K
- GitHub stars
- 2.6K
- last updated
- Aug 21, 2026
Install
$ npx -y skills add yaklang/hack-skills --skill steganography-techniques --agent claude-codeInstalls into .claude/skills of the current project.
Files
SKILL: Steganography Techniques — Expert Analysis Playbook
AI LOAD INSTRUCTION: Expert steganography detection and extraction techniques. Covers image steganography (LSB, PNG chunk hiding, JPEG DCT, EXIF metadata, dimension tricks, palette manipulation), audio steganography (spectrogram, LSB, DTMF, morse), file steganography (polyglots, binwalk, NTFS ADS, steghide), and text steganography (whitespace, zero-width Unicode, homoglyphs). Base models miss the systematic file-type-based analysis approach and tool-specific extraction workflows.
0. RELATED ROUTING
Before going deep, consider loading:
- traffic-analysis-pcap for extracting files from network captures before stego analysis
- memory-forensics-volatility for extracting files from memory dumps
- classical-cipher-analysis if extracted hidden data is further encrypted/encoded
Tool Reference
Sponsors
Details
- Repository
- github.com/yaklang/hack-skills
- First seen
- Jun 3, 2026
More from yaklang/hack-skills
All 102- Smart Contract Vulnerabilities3.7K
- Stack Overflow And Rop3.7K
- Rsa Attack Techniques3.7K
- Sandbox Escape Techniques3.7K
- Lattice Crypto Attacks3.7K
- Symmetric Cipher Attacks3.7K
- Windows Lateral Movement3.7K
- Macos Security Bypass3.7K
- Ntlm Relay Coercion3.7K
- Nosql Injection3.7K
- Macos Process Injection3.7K
- Upload Insecure Files3.7K
- Unauthorized Access Common Services3.6K
- Reverse Shell Techniques3.6K
- Ghost Bits Cast Attack3.5K
- Hack4.6K
- Android Pentesting Tricks4.3K
- Recon And Methodology4.3K
- Sqli Sql Injection4.2K
- Code Obfuscation Deobfuscation4.2K
- Xss Cross Site Scripting4.2K
- Api Sec4.1K
- Business Logic Vulnerabilities4.1K
- Ssrf Server Side Request Forgery4.1K