Guide Hide your files in jpeg image!

I searched the forum and got no similar result. So, I am sharing this trick that I found over facebook by some of my friend. It can be old trick to some members and new for some.

Yes, as the title of this thread suggests you can hide your secret files inside JPEG images using WinRAR and command line magic!

In this tutorial I'll show you how to hide "secret.txt" in an image called "xtechmaniac.jpg".

Pre-requirements : Only WinRar! :P

1. Place secret.txt and xtechmaniac.jpg in a folder. (say D:\Hiding)
2. Convert secret.txt to secret.rar by using WinRar (Right click on secret.txt > Add to "secret.rar")
3. Open Command Prompt.
4. Go to that specific folder using cd commands. (D:\Hiding in this case)
5. Now type copy /b xtechmaniac.jpg + secret.rar result.jpg
6. You can substitute the name according to your own requirements. This will make a file named result.jpg which will contains both xtechmaniac.jpg and secret.txt
7. Done! Open that folder and you can see a result.jpg file. If you open result.jpg normally you'll see a image but if you open it with Winrar you'll see your hidden file i.e. secret.txt. ;)

I'm attaching a file as an example.

Comments and Reps are always welcomed.. :)
 

Attachments

  • result.jpg
    result.jpg
    36.7 KB · Views: 281
XTechManiac said:
There lays the trick!

Actually, when we open that file(changed extension name) it cant render anything, so whoever that have some little knowledge about computer can open the file in the correct format using trail and error. But in this case(hided in .jpeg image) if anyone open the image he'll see a normal image, which makes him impossible to think that inside the image file there is *ahem* things.. ;) Just place that image file in a collection of wallpaper and you are done.. :P
Even this method is not fool proof ,any experienced user can check the image size and get to know about hidden things inside it.

--- Updated Post - Automerged ---

nfsnfs said:
^^ what are these ? ,could you explain a bit ?
Hidden Drive

Go to run

type regedit to go into registry editor

Go to HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Create a new dword value and name it NoDrives



Double click on it to get to properties window then inpuit the value according to your drive letter.

A=1

From calculating values for other drives consider b as 1 and so on like c becomes 2 d becomes 3.

To calculate value for inputting in dword

Check the value of letter using above method starting from b as 1.

Example h becomes 6

dword value of c=2 raise to value got from above method=2 raise to 6=64

For hiding E drive



To unhide you have to follow same procedure.

Note:you cant hide system drive like C: and using this method even you cant find the drive though cmd.
 
Nice find. But, if you have a bunch of say....jpegs to hide, my impression is that this method would be tedious.

I remember trying to hide my personal data since my DOS days using things like ucPassword(it would modify the JPEG viewer executable file to ask for a password before executing it), 007 for Windows(which would essentially do the same thing in Windows), use alt codes (folders having a special character not available on the keyboard as the name) , rename the file extension (which would still be a problem if the name was a giveaway of what was were the file contents) etc.

Nowadays, I just use TrueCrypt and have created a 500GB container to hide all my data. It's been working flawlessly so far and is simple to use. I'd like to know how others are securing their personal data as well.
 
d@rK nEmEsIs said:
Even this method is not fool proof ,any experienced user can check the image size and get to know about hidden things inside it.
In this particular example he has used a small file to embed in a little bigger one.

Looking at the file size of his attachment at 37KB, who would suspect there is anything in there ?

Granted if he tries hiding a movie or mp3 in there maybe the file size will get suspicously large and attract attention. But for smaller files, at first glance that jpg is normal unless you run it through some sort fo file analyser. Even then, if its one jpeg among thousands, its effectively invisible.

It's not very high tech or fancy but it achieves its goal of deception.
 
blr_p said:
In this particular example he has used a small file to embed in a little bigger one.

Looking at the file size of his attachment at 37KB, who would suspect there is anything in there ?

Granted if he tries hiding a movie or mp3 in there maybe the file size will get suspicously large and attract attention. But for smaller files, at first glance that jpg is normal unless you run it through some sort fo file analyser. Even then, if its one jpeg among thousands, its effectively invisible.

It's not very high tech or fancy but it achieves its goal of deception.
Thanks!

sydras said:
Nice find. But, if you have a bunch of say....jpegs to hide, my impression is that this method would be tedious.

I remember trying to hide my personal data since my DOS days using things like ucPassword(it would modify the JPEG viewer executable file to ask for a password before executing it), 007 for Windows(which would essentially do the same thing in Windows), use alt codes (folders having a special character not available on the keyboard as the name) , rename the file extension (which would still be a problem if the name was a giveaway of what was were the file contents) etc.

Nowadays, I just use TrueCrypt and have created a 500GB container to hide all my data. It's been working flawlessly so far and is simple to use. I'd like to know how others are securing their personal data as well.
Yes! TrueCrypt is a great software! I use this process to hide my password and other small stuff.
One feature that I like about TrueCrypt is the hidden volume. We can create two volume in single file and have different passwords for both of them. Mount using appropriate password will show you your hidden volume.
Useful in cases when you're forced to open the volume to somebody. :P
 
blr_p said:
In this particular example he has used a small file to embed in a little bigger one.

Looking at the file size of his attachment at 37KB, who would suspect there is anything in there ?

Granted if he tries hiding a movie or mp3 in there maybe the file size will get suspicously large and attract attention. But for smaller files, at first glance that jpg is normal unless you run it through some sort fo file analyser. Even then, if its one jpeg among thousands, its effectively invisible.

It's not very high tech or fancy but it achieves its goal of deception.
Will you be hiding small files in it which are in kbs,definitely not.
 
d@rK nEmEsIs said:
Will you be hiding small files in it which are in kbs,definitely not.

I use this process to hide my passwords and other small stuff. Anyways, as I said I stumbled across this trick over facebook, so thought of sharing! :)
 
XTechManiac said:
I use this process to hide my passwords and other small stuff. Anyways, as I said I stumbled across this trick over facebook, so thought of sharing! :)
Just a piece of advice.Never keep your passwords in your daily use computer rather memorize it.
 
d@rK nEmEsIs said:
Just a piece of advice.Never keep your passwords in your daily use computer rather memorize it.

:P
AceMcCloud said:
there was a similar thread in TE about this before. Thats where I came to know about it in the first place...

http://www.techenclave.com/guides-and-tutorials/gr8-method-secure-ur-files-time-91274.html

o_O Actually I performed a search for "Hide your files in jpeg image" before creating this thread and got no such result.. :|

Anyways, as I had said earlier that this trick can be old to some members but new for some, so its good for those who got hold of it now.. :)
 
that's a good method. but i have used another simpler method in the past, especially while attaching .exe files with e-mail. The e-mail client did not allow certain type of attachment like .exe. what i used to do is produced below: (assuming the file is auxsetup.exe)

Go to DOS Command Prompt (or type cmd in "run")
Go to the folder where file is saved
Type: ren auxsetup.exe result.pdf
Exit

Your job is done. just have to remember the "ren" command
Repeat the procedure to reconvert (ren result.pdf auxsetup.exe)

Please note that "result.pdf" is only illustrative. you can use any result file name followed by file type such as jpg etc. see the attached result.pdf file. you can re-convert it back using the above procedure. well, maybe it is a way to attach .exe in this forum, which is otherwise, not allowed.
 

Attachments

^ Programs today are more complex than that, to be able to determine the type of a file based on its headers. Extensions do not matter that much any more :)
 
ronit said:
this is a very old trick for hiding sensitive info. I wonder still how xperts are unknown about it.

Yup, as I said, this can be an old trick to some serious geek out there but still new for some.. :)

Thanks all of you.
 
Back
Top