Skip to content

A forensic tool for detecting hidden payloads in files using entropy, string extraction, and steganography analysis.

License

Notifications You must be signed in to change notification settings

ClearLotus-git/StegoScope

Repository files navigation

StegoScope: Hidden Data Finder

StegoScope is a forensic tool for detecting hidden payloads in files using entropy analysis, string extraction, and future steganography detection methods.

Features

  • Calculate file entropy (detect suspiciously high or low randomness).
  • Extract printable strings from binary data.
  • Flag anomalies that could indicate steganography or encryption.

Usage

python3 stegoscope.py <image file>

Roadmap

Completed

  • Project structure created (main script, samples folder, README).
  • Entropy calculation added.
  • Basic ASCII string extraction added.
  • File analysis prints size, entropy, and sample strings.

In Progress

  • Implement LSB (least significant bit) detection for PNG/JPEG images.
  • Add export options (CSV/JSON for results).
  • Improve CLI interface with argparse (custom file input).

Future Ideas

  • Add PDF/doc stego detection (metadata + embedded files).
  • Integrate YARA rules for detecting common stego payloads.
  • Build a simple GUI (Tkinter or web-based dashboard).
  • Add OSINT integration (check suspicious file hashes online).

About

A forensic tool for detecting hidden payloads in files using entropy, string extraction, and steganography analysis.

Topics

Resources

License

Stars

Watchers

Forks

Packages

No packages published

Languages