View Issue Details

IDProjectCategoryView StatusLast Update
0009804Kali LinuxNew Tool Requestspublic2026-07-30 10:33
Reporterabhrankan Assigned Todaniruiz  
PrioritynormalSeverityminorReproducibilityhave not tried
Status closedResolutionwon't fix 
Summary0009804: stegofox — Encrypted LSB steganography CLI
Description

[Name] stegofox

[Version] 0.1.0 (git tag: v0.1.0)

[Homepage] https://github.com/foxhackerzdevs/stegofox

[Download] https://github.com/foxhackerzdevs/stegofox/releases/tag/v0.1.0

[Author] foxhackerzdevs

[Licence] MIT

[Description] stegofox is a command-line tool for hiding arbitrary files inside PNG images using least-significant-bit (LSB) steganography. Payloads can optionally be encrypted with AES-256-GCM (key derived via PBKDF2-HMAC-SHA256, 100k iterations) before embedding, so a wrong password fails cleanly via the GCM auth tag rather than producing garbage output. A 4-byte magic signature plus a length header precede the embedded payload so extraction knows exactly how many bytes to read back. Output is always written as PNG to guarantee lossless round-tripping of the embedded bits. The tool also checks embedding capacity against the cover image before writing anything, so oversized payloads fail with a clear error instead of corrupting the image.

[Dependencies] Python >= 3.8, pillow, numpy, pycryptodome

[Similar tools] steghide, stegseek, zsteg, outguess, stegcracker

[Activity] Actively developed; initial release 2026, MIT licensed, test suite included (unit + integration tests covering crypto round-trip, wrong-password/tampered-ciphertext rejection, and embed/extract edge cases).

[How to install]

pip install git+https://github.com/foxhackerzdevs/[email protected]

or from a local clone:

git clone https://github.com/foxhackerzdevs/stegofox.git
cd stegofox
git checkout v0.1.0
pip install -e .

[How to use]

Embed a file into a cover image

stegofox embed cover.png secret.txt -o output.png

Embed with AES-256-GCM encryption

stegofox embed cover.png secret.txt -o output.png --password hunter2

Extract

stegofox extract output.png --password hunter2

[Packaged] Not yet packaged for Debian (no debian/ directory in the source tree). Only distributed via pip/GitHub at this time.

Activities

abhrankan

abhrankan

2026-07-28 15:12

reporter   ~0021906

[Name] stegofox

[Version] 0.1.0 (git tag: v0.1.0)

[Homepage] https://github.com/foxhackerzdevs/stegofox

[Download] https://github.com/foxhackerzdevs/stegofox/releases/tag/v0.1.0

[Author] foxhackerzdevs

[Licence] MIT

[Description]
stegofox is a command-line tool for hiding arbitrary files inside PNG
images using least-significant-bit (LSB) steganography. Payloads can
optionally be encrypted with AES-256-GCM (key derived via
PBKDF2-HMAC-SHA256, 100k iterations) before embedding, so a wrong
password fails cleanly via the GCM auth tag rather than producing
garbage output. A 4-byte magic signature plus a length header precede
the embedded payload so extraction knows exactly how many bytes to
read back. Output is always written as PNG to guarantee lossless
round-tripping of the embedded bits. The tool also checks embedding
capacity against the cover image before writing anything, so
oversized payloads fail with a clear error instead of corrupting the
image.

[Dependencies]
Python >= 3.8, pillow, numpy, pycryptodome

[Similar tools]
steghide, stegseek, zsteg, outguess, stegcracker

[Activity]
Actively developed; initial release 2026, MIT licensed, test suite
included (unit + integration tests covering crypto round-trip,
wrong-password/tampered-ciphertext rejection, and embed/extract
edge cases).

[How to install]

pip install git+https://github.com/foxhackerzdevs/[email protected]

or from a local clone:

git clone https://github.com/foxhackerzdevs/stegofox.git
cd stegofox
git checkout v0.1.0
pip install -e .

[How to use]

# Embed a file into a cover image
stegofox embed cover.png secret.txt -o output.png

# Embed with AES-256-GCM encryption
stegofox embed cover.png secret.txt -o output.png --password hunter2

# Extract
stegofox extract output.png --password hunter2

[Packaged]
Not yet packaged for Debian (no debian/ directory in the source
tree). Only distributed via pip/GitHub at this time.

daniruiz

daniruiz

2026-07-30 10:33

manager   ~0021907

Hello,

Thanks for your submission. We can’t package every infosec tool, so we prioritize those with wider adoption and community usage.

Best of luck with your project.

Issue History

Date Modified Username Field Change
2026-07-28 13:04 abhrankan New Issue
2026-07-28 15:12 abhrankan Note Added: 0021906
2026-07-30 10:33 daniruiz Note Added: 0021907
2026-07-30 10:33 daniruiz Assigned To => daniruiz
2026-07-30 10:33 daniruiz Status new => closed
2026-07-30 10:33 daniruiz Resolution open => won't fix