StegCracker – Brute Force Utility to Uncover Hidden Data


Steganography brute-force utility to uncover hidden data inside files.


Using stegcracker is simple, pass a file to it as it’s first parameter and optionally pass the path to a wordlist of passwords to try as it’s second parameter. If you don’t specify the wordlist, the tool will try to use the built-in rockyou.txt wordlist which ships with Kali Linux. If you are running a different distribution, you can download the rockyou wordlist here.

$ stegcracker <file> [<wordlist>]


The program requires the steghide binary, and Python 3.6 or higher to be installed. If python 3.6 is not installed, check out this guide on how to do so. Steghide can be installed by using the following command (Kali Linux):

$ sudo apt-get install steghide -y


To install StegCracker, run the following command:

$ pip3 install stegcracker


To update StegCracker, simply pass -U to the installation command:

$ pip3 install stegcracker -U --force-reinstall



FAQ / Troubleshooting

  • I can’t install the tool with pip3 but python 3.6+ is installed
    • Your pip binary might be using a different version of Python. Try installing it directly through Python like so (replace “X” with your minor version, eg: python3.6): python3.X -m pip install -U stegcracker
  • I’m using StegCracker 1.X, how do I upgrade?
    • If you’re upgrading StegCracker from the original 1.X release, please remove the existing version first using: sudo rm --force $(which stegcracker)
  • I want to run an older version of StegCracker, how do I obtain a copy?
    • While I recommended using the latest and greatest version, you might want to install an older version of StegCracker. You can do this by checking out the releases page. (Note: all issues or pull requests regarding this version will be be ignored).
  • Can I run this tool on other Linux distro’s?
    • As long as you have a valid version of Python 3.6 and steghide in your path it should work. Please note that the tool has officially been tested on Kali Linux, all other platforms might be unstable. If you find a bug on another distro, please submit an issue and I’ll see what I can do (but do fill in the template as well).
  • Can I run StegCracker on Windows?
    • As far as I know there aren’t any official steghide releases for Windows, so as far as I’m aware: no


Please follow and like us: