Forensics/Steganography | Defend the Web

agilman816
9 years ago

0

I’ve been working on something fun. Steganography.

I pulled a image from inside another image using the BlindHide algorithm and got this image from it : http://imgur.com/BqMkcik

Being a Doctor Who fan I recognized the picture as gallifreyan text. After reading on how to decode it, I learned that the circles construct the sentence “this is this teath wotthb”. I verified that I got the right message by cross referencing it with a site I found (https://gallifreyan-9000.rhcloud.com/#) and typing in the string and it generates the same picture.

I’m stumped though, on ciphering out the last two words. I’ve tried things as keys for different ciphers, tried running strings on the image to see if there was anything hidden… nothing?

Anyone have a clue what “teath wotthb” might mean?

dloser
9 years ago

0

Looks more like that is the image you got from the generator itself. Not all letters are correctly displayed (“WARNING: Work in progress. This application isn’t finished and [s]may[/s] will therefore give false results.”), so I’m not sure how much it is worth, really.

agilman816
9 years ago

0

I uploaded the wrong image to imgur.. You are right, that is the image I created using the generator.

Here is the original image: http://imgur.com/tix1SoX

and this is a link to the first image that has the doctor who image hidden within it using the HideSeek algorithm:
http://imgur.com/lIVgG1m

dloser
9 years ago

0

Right… Evidently they used the same broken tool. And that means that what is left to you is figuring out which inputs result in the same output. Look closely to note that the original is not the same as what you showed us before.

When you take those things into account, it shouldn’t be hard to figure out the proper solution. Ok? Right! Let’s do this. Done yet? ;)

agilman816
9 years ago

0

OHHHHHHHHHHHHHHHHHHH the circles!

agilman816
9 years ago

0

and yeah, that thing is busted and that’s disappointing.

hmmmm.. time to get to work.

agilman816
9 years ago

0

I got it! It is solved. Thanks, dloser, for helping. I never would have found out that the site was broken.