Reproducibility: N/A
Severity: minor
Priority: normal

[Name]
StegX

[Version]
1.1.0

[Homepage]

• GitHub: https://github.com/Delta-Sec/StegX
• GitLab: https://gitlab.com/AyhamAsfoor/StegX
• Wiki: https://github.com/Delta-Sec/StegX/wiki

[Download]

• GitHub Release (.deb): https://github.com/Delta-Sec/StegX/releases/tag/StegX

[Author]
Delta-Sec (Ayham Asfoor)
Email: [email protected]

[Licence]
MIT License

[Description]
StegX is a powerful command-line steganography tool that uses LSB (Least Significant Bit) techniques to embed data inside images (PNG). It securely encrypts data using AES-256-GCM before embedding and derives encryption keys using scrypt KDF for strong password protection. It optionally compresses data before embedding, maximizing capacity. The tool features detailed error handling, data integrity checking, capacity validation, and a CLI interface. Supports Windows, Linux, and macOS.

[Dependencies]

• Python 3.8+
• Pillow >= 9.0.0
• cryptography >= 36.0.0
• tqdm >= 4.60.0

[Similar tools]

• Steghide
• OpenPuff
• F5
• Outguess

[Activity]

• Project launched: May 2025
• Status: Actively maintained with a roadmap and test coverage
• Last release: v1.1.0 (June 2025)
• Security Evaluation Report: ✅ Passed all forensic/steganalysis tests (Zsteg, Binwalk, ENT, ExifTool)

[How to install]
sudo dpkg -i stegx_1.1.0.deb

[How to use]
Encode (Hide file):
python stegx.py encode -i cover.png -f secret.txt -o stego.png -p YourStrongPassword --compress

Decode (Extract file):
python stegx.py decode -i stego.png -d extracted_files/ -p YourStrongPassword

[Packaged]
✅ Yes — Debian package .deb is available and Lintian clean. Includes:

• man page
• postinst script
• control
• README, LICENSE
• Pytest test suite (50+ cases)