Page 1 of 1

checking files for hiden scripts

Posted: Thu Jan 11, 2018 8:13 am
by ckonn
hello,
many people surfing internet downloading different image, audio and video files.

how could a linux-user check if a separate image, audio or video file contains some kind of embedded code or some kind of malicious script implemented by some steganographic method?

thanks in advans

Re: checking files for hiden scripts

Posted: Thu Jan 11, 2018 8:19 am
by Pjotr
Just put your web browser in a sandbox and forget about these worries:
https://sites.google.com/site/easylinux ... ct/sandbox

Relax, you're running Linux. :mrgreen:

Re: checking files for hiden scripts

Posted: Mon Feb 19, 2018 7:54 am
by ganamant
There is no way to extract the plaintext (be it a script or anything else) from a steganographed image unless you know the passphrase. And then, you wuold have to save the script, make it executable and run it. If you just download the image and let it alone, it can contain all the evils in the world, but they will never get out of it unless you work hard to make it happen.

As to check whether an image is steganographed or not, this is impossible (or extremely hard) without the passphrase. If you think about it, this ability alone, even without the ability to extract anything, would defeat the very purpose of steganography.