View Issue Details

IDProjectCategoryView StatusLast Update
0009804Kali LinuxNew Tool Requestspublic2026-07-28 13:06
Reporterabhrankan Assigned To 
PrioritynormalSeverityminorReproducibilityhave not tried
Status newResolutionopen 
Summary0009804: stegofox — Encrypted LSB steganography CLI
Description

[Name] stegofox

[Version] 0.1.0 (git tag: v0.1.0)

[Homepage] https://github.com/foxhackerzdevs/stegofox

[Download] https://github.com/foxhackerzdevs/stegofox/releases/tag/v0.1.0

[Author] foxhackerzdevs

[Licence] MIT

[Description] stegofox is a command-line tool for hiding arbitrary files inside PNG images using least-significant-bit (LSB) steganography. Payloads can optionally be encrypted with AES-256-GCM (key derived via PBKDF2-HMAC-SHA256, 100k iterations) before embedding, so a wrong password fails cleanly via the GCM auth tag rather than producing garbage output. A 4-byte magic signature plus a length header precede the embedded payload so extraction knows exactly how many bytes to read back. Output is always written as PNG to guarantee lossless round-tripping of the embedded bits. The tool also checks embedding capacity against the cover image before writing anything, so oversized payloads fail with a clear error instead of corrupting the image.

[Dependencies] Python >= 3.8, pillow, numpy, pycryptodome

[Similar tools] steghide, stegseek, zsteg, outguess, stegcracker

[Activity] Actively developed; initial release 2026, MIT licensed, test suite included (unit + integration tests covering crypto round-trip, wrong-password/tampered-ciphertext rejection, and embed/extract edge cases).

[How to install]

pip install git+https://github.com/foxhackerzdevs/[email protected]

or from a local clone:

git clone https://github.com/foxhackerzdevs/stegofox.git
cd stegofox
git checkout v0.1.0
pip install -e .

[How to use]

Embed a file into a cover image

stegofox embed cover.png secret.txt -o output.png

Embed with AES-256-GCM encryption

stegofox embed cover.png secret.txt -o output.png --password hunter2

Extract

stegofox extract output.png --password hunter2

[Packaged] Not yet packaged for Debian (no debian/ directory in the source tree). Only distributed via pip/GitHub at this time.

Activities

There are no notes attached to this issue.

Issue History

Date Modified Username Field Change
2026-07-28 13:04 abhrankan New Issue