What's the Password?

Published Tuesday, August 07, 2007 12:19 PM

Whew! It's been a while, but rejoice, I'm back with another dark tip!

Have you ever wondered, "hey, I have some files that I want to keep in my hardrive, but I don't want anybody opening/reading/executing it...". Yeah, there are lots of ways to do it. But what I'm going to demonstrate is *cooler* than those. We will actually learn how to hide your files inside an image! :D

Requirements:
1. Any archiving utility.
2. An image file of your choice. (Can be JPG, BMP, etc...)
3. Your file. (I'll use an asm source code for demo.)

First, gather all the "secret" files that you want to hide. Once you're done, zip/rar/etc. them all up. For the demo, I'll name it myfiles.zip. Find your image file, I'll use a gif file named modchip.gif, then place your secret archive with it.

Run your prompt, type the simple command;

copy /b modchip.gif + myfiles.zip modchip_s.gif [ENTER!]

copy is the copy command we all got to know in the good 'ol world of DOS.    
The /b option is used to copy binary files.
modchip_s.gif is the output file where modchip.gif and myfiles.zip will be copied to.

Now, once all have been done correctly, the message "1 file(s) copied." should be displayed on the prompt.

Navigate to the directory where you placed all your files, find the output, in my case modchip_s.gif. Double click it, hmmmm... seems like a normal image file ain't it? But how do we see the hidden file? I leave that all to you. ;) (@EDIT: Tip: Just look at all the requirements above, see what you could use to extract the files. :D.)

Below is the output of my demo. Can you guess what my *password* is?  Haha, it is literally IN the image!

 

Hope you learned much from this. So the next time you open an image file, take a second and think, there might be some surprises in it! (Just hope it ain't a trojan... :))

'Til next time!

by modchip
Filed under: ,

Comments

# khulit27 said on Monday, August 06, 2007 9:23 PM

OPENSESAME...

Cool blog!!! ***** for you Modchip... :p

# Lostki said on Monday, August 06, 2007 10:08 PM

Nice tip... :P

# willydavidjr said on Tuesday, August 07, 2007 2:23 AM

Actually, I didn't get the idea on how to view the file on the image. Can you show us the answer? You've used all your requirements.

# modchip said on Tuesday, August 07, 2007 6:04 AM

Oops... (i did it again) Extract with WinRAR... :D

# Chyros said on Wednesday, August 08, 2007 9:52 PM

Here's another tip for more secure way. After compressing it as WinRAR and merging it with image... Hex-edit the 4 letter WinRAR header (RAR!) to any 4 letter characters. Just make sure you don't corrupt the file. So even if you extract it as WinRAR, it will say "Corrupted File". Only you know how to change the file back to WinRAR compressed file again by hex-editting the 4 letter WinRAR header back to "RAR!".

# modchip said on Thursday, August 09, 2007 3:33 AM

Great tip! Thanks Chyros!

Leave a Comment

(required) 
(required) 
(optional)
(required) 

Enter the numbers above: