stegbrute - Fast Steganography bruteforce tool written in Rust

项目说明

![]()
![]()

stegbrute

stegbrute is a fast steganography brute force tool written in Rust
<p align="center">
<img src=" >
</p>

Dependencies

Stegbrute cannot run without steghide!, to install steghide run :

if you are not in a debian distribution you can download it from steghide website

Installation

stegbrute can be installed in different ways:

Cargo

<img src=" width=35 height=35>

throught cargo (Rust package manager)

if you don't ha you can install it either from apt or by downloading Rust lang

this will work for every platform

Debian distributions

<img src=" width=35 height=35>

if you ha/kali or other debian distributions you can install the .deb file you find on the releases section, then unpack the file and run it

Docker

<img src=" width=35 height=35>

if you don't ha installed you can follow their guide

first you have to pull the docker image (only 4.93 MB) from the docker registry, you can see it here, if you don't want to pull the image you can also clone the repository and then build the image from the Dockerfile

you can also decide to pull different images by replacing 'latest' with a stegbrute , ex.

if you don't want to pull the image you can download/copy stegbrute Dockerfile that can be found here and then build the image from the Dockerfile

then if you want to launch the container you have to first create a to share your files to the container

then move or copy the files you want to use for stegbrute inside the folder wich usually is here /var/lib/docker//stegbrute_data/_data by just doing

and now run stegbrute

replace the <options> with the options/arguments you want to give to stegbrute,
once you did e you don't have to pull/build the image again only if there are new updates or features

Always save your results inside the and not in the container because then the results will be deleted! you can save them by adding this option -x /$/results.txt or --extract-file /$/results.txt

if you added this and did e correctly at the end of every attack you'd find the results inside the folder /var/lib/docker//stegbrute_data/_data

this will work for every platform

## Executable
you can also download the already compiled programn and then execute it, example :

Usage

stegbrute is very simple to use and it gives you many options, you can view the program help with the -h or --help option

for example :

<p align="center">
<a href=" target="_blank"><img src=" /></a>
</p>

Options :

-x or --extract-file with <file_name> will save the results of the extracted data into the file_name, if no file is specified stegbrute will save your results inside ./stegbrute_results.txt file

-t or --threads with <number_of_threads> will launch a number of programs bruteforcing the file simultaneously, incrementing the number of threads doesn't always mean this will run more faster it all depends on how many threads your machine can handle

-f or --file_name with <file_name> the file name that stegbrute is going to attack, must be one of these supported formats : JPEG, BMP, WAV or AU

-w or --wordlist with <wordlist> the file where stegbrute is going to take the passwords line by line and then start trying them to the file you want to crack, if you don't have one you can install for example rockyou.txt

Benchmark

stegbrute benchmark on different wordlists using 3 threads

| Wordlist passwords | Time |
|---|---|
| 100 | 841.12ms |
| 1000 | 8.57s |
| 10000 | 77.79s |
| 100000 | 775.93s |

项目信息

开发语言：Rust

Star 数：245

技术要点

该项目属于CTF思路方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕Fast Steganography bruteforce tool written in Rust useful for CTF's展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。