zsteg 0.2.1 → 0.2.5

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: cb1bb907e034ed5fc54f9febcf4cdd78f6de91af843adf94ffd03d0a8be3aac1
-  data.tar.gz: b5cf9a4fd08d72129954628dca764be23528402ad82e608f5f36f96825b1437d
+  metadata.gz: b2496b0f75b1d7e5c803e28cb88a3e3474fe713ec74b7e8b8e3723345153d3c8
+  data.tar.gz: 56161d7f56a46d6088a85c1a234e5e7932ed947cf4177fc65de54a36cf953823
 SHA512:
-  metadata.gz: 0f0532dd0e6e6bdce7dbdb9a769738f6964ce0033344f659b4447fe0af03ee7e128e89cfe1ab967edc6c4d65a2b836a4b3951320187444036a4260fee2bb79ff
-  data.tar.gz: 69908330b837fbbc32a3f358c478756a7341361cfce99a62922c00a0a29c6c0941396ae5785977e9d4249df1b6506ff2ae17e93ef1cbe862ae61e8e5f40715fb
+  metadata.gz: c899d49eed8c247c186c141335e36b6753bce0255400fba3bff12e5382fbe5602bb68d59155e192080167b1c579496308fbb3ba0ab28cdc069b1b39c3d9e1f77
+  data.tar.gz: fb913d23ee3dc386d399ce63913a8c5b7d30a4f785b61f84043a599106de7ec0638d0a512813f698d42d60e2e395a0d0fdf87000081d5ff34f184d82bb7ff87b

data/Gemfile

@@ -1,10 +1,10 @@
 source "http://rubygems.org"
 
-gem 'zpng', ">= 0.3.0"
+gem 'zpng', ">= 0.3.3"
 gem "iostruct"
 
 group :development do
   gem "rspec",   "~> 3.9.0"
-  gem "bundler", "~> 2.1.4"
+  gem "bundler", "~> 2.2.3"
   gem "jeweler", "~> 2.3.9"
 end

data/Gemfile.lock

@@ -5,10 +5,11 @@ GEM
     builder (3.2.4)
     descendants_tracker (0.0.4)
       thread_safe (~> 0.3, >= 0.3.1)
-    diff-lcs (1.3)
+    diff-lcs (1.4.4)
     faraday (0.9.2)
       multipart-post (>= 1.2, < 3)
-    git (1.5.0)
+    git (1.8.1)
+      rchardet (~> 1.8)
     github_api (0.16.0)
       addressable (~> 2.4.0)
       descendants_tracker (~> 0.0.4)
@@ -16,9 +17,9 @@ GEM
       hashie (>= 3.4)
       mime-types (>= 1.16, < 3.0)
       oauth2 (~> 1.0)
-    hashie (4.0.0)
+    hashie (4.1.0)
     highline (2.0.3)
-    iostruct (0.0.1)
+    iostruct (0.0.4)
     jeweler (2.3.9)
       builder
       bundler
@@ -30,52 +31,55 @@ GEM
       rake
       rdoc
       semver2
-    jwt (2.2.1)
+    jwt (2.2.2)
     mime-types (2.99.3)
-    mini_portile2 (2.4.0)
-    multi_json (1.14.1)
+    mini_portile2 (2.6.1)
+    multi_json (1.15.0)
     multi_xml (0.6.0)
     multipart-post (2.1.1)
-    nokogiri (1.10.7)
-      mini_portile2 (~> 2.4.0)
-    oauth2 (1.4.2)
+    nokogiri (1.12.5)
+      mini_portile2 (~> 2.6.1)
+      racc (~> 1.4)
+    oauth2 (1.4.4)
       faraday (>= 0.8, < 2.0)
       jwt (>= 1.0, < 3.0)
       multi_json (~> 1.3)
       multi_xml (~> 0.5)
       rack (>= 1.2, < 3)
-    psych (3.1.0)
-    rack (2.1.1)
-    rainbow (2.0.0)
-    rake (13.0.1)
-    rdoc (6.2.1)
+    psych (3.3.0)
+    racc (1.5.2)
+    rack (2.2.3)
+    rainbow (3.0.0)
+    rake (13.0.3)
+    rchardet (1.8.0)
+    rdoc (6.3.2)
     rspec (3.9.0)
       rspec-core (~> 3.9.0)
       rspec-expectations (~> 3.9.0)
       rspec-mocks (~> 3.9.0)
-    rspec-core (3.9.1)
-      rspec-support (~> 3.9.1)
-    rspec-expectations (3.9.0)
+    rspec-core (3.9.3)
+      rspec-support (~> 3.9.3)
+    rspec-expectations (3.9.4)
       diff-lcs (>= 1.2.0, < 2.0)
       rspec-support (~> 3.9.0)
     rspec-mocks (3.9.1)
       diff-lcs (>= 1.2.0, < 2.0)
       rspec-support (~> 3.9.0)
-    rspec-support (3.9.2)
+    rspec-support (3.9.4)
     semver2 (3.4.2)
     thread_safe (0.3.6)
-    zpng (0.3.0)
-      rainbow (~> 2.0.0)
+    zpng (0.3.3)
+      rainbow
 
 PLATFORMS
   ruby
 
 DEPENDENCIES
-  bundler (~> 2.1.4)
+  bundler (~> 2.2.3)
   iostruct
   jeweler (~> 2.3.9)
   rspec (~> 3.9.0)
-  zpng (>= 0.3.0)
+  zpng (>= 0.3.3)
 
 BUNDLED WITH
-   2.1.4
+   2.2.22

data/README.md

@@ -29,17 +29,26 @@ Usage
     Usage: zsteg [options] filename.png [param_string]
     
         -c, --channels X                 channels (R/G/B/A) or any combination, comma separated
-                                         valid values: r,g,b,a,rg,rgb,bgr,rgba,...
+                                         valid values: r,g,b,a,rg,bgr,rgba,r3g2b3,...
         -l, --limit N                    limit bytes checked, 0 = no limit (default: 256)
-        -b, --bits N                     number of bits (1..8), single value or '1,3,5' or '1-8'
+        -b, --bits N                     number of bits, single int value or '1,3,5' or range '1-8'
+                                         advanced: specify individual bits like '00001110' or '0x88'
             --lsb                        least significant BIT comes first
             --msb                        most significant BIT comes first
         -P, --prime                      analyze/extract only prime bytes/pixels
+            --invert                     invert bits (XOR 0xff)
         -a, --all                        try all known methods
         -o, --order X                    pixel iteration order (default: 'auto')
                                          valid values: ALL,xy,yx,XY,YX,xY,Xy,bY,...
         -E, --extract NAME               extract specified payload, NAME is like '1b,rgb,lsb'
     
+            --[no-]file                  use 'file' command to detect data type (default: YES)
+            --no-strings                 disable ASCII strings finding (default: enabled)
+        -s, --strings X                  ASCII strings find mode: first, all, longest, none
+                                         (default: first)
+        -n, --min-str-len X              minimum string length (default: 8)
+            --shift N                    prepend N zero bits
+    
         -v, --verbose                    Run verbosely (can be used multiple times)
         -q, --quiet                      Silent any warnings (can be used multiple times)
         -C, --[no-]color                 Force (or disable) color output (default: auto)
@@ -54,7 +63,8 @@ Examples
 
     # zsteg flower_rgb3.png
 
-    3b,rgb,lsb,xy       .. text: "SuperSecretMessage"
+    imagedata           .. file: 370 XA sysV pure executable not stripped - version 768
+    b3,rgb,lsb,xy       .. text: "SuperSecretMessage"
 
 ### Multi-result file
 
@@ -65,16 +75,34 @@ Examples
     meta A              .. [same as "meta F"]
     meta date:create    .. text: "2012-03-15T23:32:46+07:00"
     meta date:modify    .. text: "2012-03-15T23:32:14+07:00"
-    1b,r,lsb,xy         .. text: "Second cat is Marussia"
-    1b,g,lsb,xy         .. text: "Good, but look a bit deeper..."
-    1b,bgr,lsb,xy       .. text: "MF_WIhf>"
-    2b,g,lsb,xy         .. text: "VHello, third kitten is Bessy"
+    imagedata           .. file: 68K BCS executable
+    b1,r,lsb,xy         .. text: "Second cat is Marussia"
+    b1,g,lsb,xy         .. text: "Good, but look a bit deeper..."
+    b1,bgr,lsb,xy       .. text: "MF_WIhf>"
+    b2,g,lsb,xy         .. text: "VHello, third kitten is Bessy"
 
 ### wbStego even distributed
 
     # zsteg wbstego/wbsteg_noenc_even.bmp 1b,lsb,bY -v
 
-    1b,lsb,bY           .. <wbStego size=22, data="xtSuperSecretMessage\n", even=true, mix=true, controlbyte="t">
+    imagedata           .. file: FoxPro FPT, blocks size 1, next free block index 65537
+        00000000: 00 01 00 01 00 00 00 01  00 00 00 00 00 00 00 00  |................|
+        00000010: 00 00 00 00 00 00 00 00  00 00 00 01 00 01 01 00  |................|
+        00000020: 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
+        00000030: 00 01 01 01 00 01 00 00  00 00 00 00 01 01 00 01  |................|
+        00000040: 01 00 01 01 00 01 00 01  00 01 01 01 01 00 00 00  |................|
+        00000050: 00 00 00 01 01 01 01 00  01 00 01 00 00 00 00 01  |................|
+        00000060: 00 00 01 01 01 00 00 01  00 01 01 01 00 01 00 00  |................|
+        00000070: 01 01 01 00 01 00 00 00  00 00 01 01 01 00 00 00  |................|
+        00000080: 00 01 00 01 00 00 01 01  01 01 00 00 00 01 01 00  |................|
+        00000090: 00 01 00 01 00 01 01 00  01 00 00 01 00 01 00 00  |................|
+        000000a0: 00 01 01 01 00 01 00 01  01 01 00 01 00 00 00 01  |................|
+        000000b0: 01 00 01 00 00 01 00 01  00 01 01 01 00 00 00 00  |................|
+        000000c0: 01 00 00 00 00 01 00 00  01 01 00 00 01 00 00 00  |................|
+        000000d0: 00 00 01 00 00 01 01 01  00 01 01 00 00 01 00 01  |................|
+        000000e0: 01 01 01 01 01 01 01 00  00 00 00 00 01 00 00 00  |................|
+        000000f0: 00 01 01 01 00 00 01 00  00 00 01 01 00 01 00 01  |................|
+    b1,lsb,bY           .. <wbStego size=22, data="xtSuperSecretMessage\n", even=true, mix=true, controlbyte="t">
         00000000: 51 00 00 16 00 00 74 0d  b5 78 1e a1 39 74 e8 38  |Q.....t..x..9t.8|
         00000010: 53 c6 56 94 75 d1 a5 70  84 c8 27 65 fe 08 72 35  |S.V.u..p..'e..r5|
         00000020: 1f 3e 53 5d a7 65 8b 6e  3b 63 6b 1d bf 72 ee 27  |.>S].e.n;ck..r.'|
@@ -86,7 +114,7 @@ Examples
 
     # zsteg wbstego/wbsteg_blowfish_pass_1.bmp 1b,lsb,bY -v
 
-    1b,lsb,bY           .. <wbStego size=26, data="\rC\xF5\xBF#\xFF[6\e\xB3"..., even=false, hdr="\x01", enc="Blowfish">
+    b1,lsb,bY           .. <wbStego size=26, data="\rC\xF5\xBF#\xFF[6\e\xB3"..., even=false, hdr="\x01", enc="Blowfish">
         00000000: 1a 00 00 00 ff 01 01 0d  43 f5 bf 23 ff 5b 36 1b  |........C..#.[6.|
         00000010: b3 17 42 4a 3f ba eb c7  ee 9c d7 7a 2b           |..BJ?......z+   |
 
@@ -94,7 +122,7 @@ Examples
 
     # zsteg ndh2k12_sp113.bmp -b 1 -o yx -v
 
-    1b,rgb,lsb,yx       .. zlib: data="%PDF-1.4\n%\xC3\xA4\xC3\xBC\xC3\xB6\xC3\x9F\n2 0 obj\n<</Length 3 0 R/Filter/FlateDecode>>\nstream\nx\x9C\x8DT\xC9n\xDB@\f\xBD\xCFW\xF0\x1C \x13\x92\xB3\x03\x86\x80\xC8K\xD1\xDE\\\b\xE8\xA1\xE8)K\x8B\xA2n\x91\\\xF2\xFB!5Zl\xD5v\v\x01\xD4\x90C\xBE\xF7\x86\x1A\n-\xC1\x9By\x01\x94'\x94`=d\xCF\xF0\xFA\x04_n\xE0\xF7\x10Gx\xFDn\xDA\xCE\xB0\x8F6\x80s$Y\xDD#\xDC\xED\b\x1CC\xF7\xBCBBF\x87^\xDE\xA1\xE9~\x9Amg\xF6\x8BZ\xCAYj", offset=4
+    b1,rgb,lsb,yx       .. zlib: data="%PDF-1.4\n%\xC3\xA4\xC3\xBC\xC3\xB6\xC3\x9F\n2 0 obj\n<</Length 3 0 R/Filter/FlateDecode>>\nstream\nx\x9C\x8DT\xC9n\xDB@\f\xBD\xCFW\xF0\x1C \x13\x92\xB3\x03\x86\x80\xC8K\xD1\xDE\\\b\xE8\xA1...", offset=4, size=186
         00000000: 00 02 eb 9b 78 9c d4 b9  65 54 24 cc 92 36 58 b8  |....x...eT$..6X.|
         00000010: d3 68 e3 ee ee 4e e3 ee  ee 0e 85 bb 3b dd 68 23  |.h...N......;.h#|
         00000020: 8d bb bb bb 3b 8d bb bb  3b 34 ee 6e 1f ef 7b ef  |....;...;4.n..{.|
@@ -112,6 +140,11 @@ Examples
         000000e0: fd bb 13 a9 e6 3a c9 da  19 34 ae f0 43 bb 90 90  |.....:...4..C...|
         000000f0: 58 88 de 46 ce 91 6f aa  8d d9 7d b8 d6 88 a6 65  |X..F..o...}....e|
 
+See also
+--------
+1. https://29a.ch/photo-forensics/
+2. https://holloway.nz/steg/
+
 License
 -------
 Released under the MIT License.  See the [LICENSE](https://github.com/zed-0xff/zsteg/blob/master/LICENSE.txt) file for further details.

data/README.md.tpl

@@ -49,6 +49,11 @@ Examples
 
 % zsteg ndh2k12_sp113.bmp -b 1 -o yx -v
 
+See also
+--------
+1. https://29a.ch/photo-forensics/
+2. https://holloway.nz/steg/
+
 License
 -------
 Released under the MIT License.  See the [LICENSE](https://github.com/zed-0xff/zsteg/blob/master/LICENSE.txt) file for further details.

data/VERSION

@@ -1 +1 @@
-0.2.1
+0.2.5

data/lib/zsteg/checker.rb

@@ -26,7 +26,7 @@ module ZSteg
           %w'r g b rgb bgr'
         end
       @verbose = params[:verbose] || -2
-      @file_cmd = FileCmd.new
+      @file_cmd = FileCmd.new if params.fetch(:file, true)
       @results = []
 
       @params[:bits]  ||= DEFAULT_BITS
@@ -65,7 +65,7 @@ module ZSteg
 
     def check
       @found_anything = false
-      @file_cmd.start!
+      @file_cmd.start! if @file_cmd
 
       if @extra_checks
         check_extradata
@@ -116,7 +116,7 @@ module ZSteg
       # return everything found if this method was called from some code
       @results
     ensure
-      @file_cmd.stop!
+      @file_cmd.stop! if @file_cmd
     end
 
     def check_imagedata
@@ -355,7 +355,7 @@ module ZSteg
         return Result::WholeText.new(data, 0)
       end
 
-      if params.fetch(:file, true) && (r = @file_cmd.data2result(data))
+      if @file_cmd && (r = @file_cmd.data2result(data))
         return r
       end
 

data/zsteg.gemspec

@@ -2,16 +2,16 @@
 # DO NOT EDIT THIS FILE DIRECTLY
 # Instead, edit Jeweler::Tasks in Rakefile, and run 'rake gemspec'
 # -*- encoding: utf-8 -*-
-# stub: zsteg 0.2.1 ruby lib
+# stub: zsteg 0.2.5 ruby lib
 
 Gem::Specification.new do |s|
   s.name = "zsteg".freeze
-  s.version = "0.2.1"
+  s.version = "0.2.5"
 
   s.required_rubygems_version = Gem::Requirement.new(">= 0".freeze) if s.respond_to? :required_rubygems_version=
   s.require_paths = ["lib".freeze]
   s.authors = ["Andrey \"Zed\" Zaikin".freeze]
-  s.date = "2020-01-14"
+  s.date = "2021-12-07"
   s.email = "zed.0xff@gmail.com".freeze
   s.executables = ["zsteg".freeze, "zsteg-mask".freeze, "zsteg-reflow".freeze]
   s.extra_rdoc_files = [
@@ -103,30 +103,24 @@ Gem::Specification.new do |s|
   ]
   s.homepage = "http://github.com/zed-0xff/zsteg".freeze
   s.licenses = ["MIT".freeze]
-  s.rubygems_version = "2.7.6".freeze
+  s.rubygems_version = "3.2.22".freeze
   s.summary = "Detect stegano-hidden data in PNG & BMP files.".freeze
 
   if s.respond_to? :specification_version then
     s.specification_version = 4
+  end
 
-    if Gem::Version.new(Gem::VERSION) >= Gem::Version.new('1.2.0') then
-      s.add_runtime_dependency(%q<zpng>.freeze, [">= 0.3.0"])
-      s.add_runtime_dependency(%q<iostruct>.freeze, [">= 0"])
-      s.add_development_dependency(%q<rspec>.freeze, ["~> 3.9.0"])
-      s.add_development_dependency(%q<bundler>.freeze, ["~> 2.1.4"])
-      s.add_development_dependency(%q<jeweler>.freeze, ["~> 2.3.9"])
-    else
-      s.add_dependency(%q<zpng>.freeze, [">= 0.3.0"])
-      s.add_dependency(%q<iostruct>.freeze, [">= 0"])
-      s.add_dependency(%q<rspec>.freeze, ["~> 3.9.0"])
-      s.add_dependency(%q<bundler>.freeze, ["~> 2.1.4"])
-      s.add_dependency(%q<jeweler>.freeze, ["~> 2.3.9"])
-    end
+  if s.respond_to? :add_runtime_dependency then
+    s.add_runtime_dependency(%q<zpng>.freeze, [">= 0.3.3"])
+    s.add_runtime_dependency(%q<iostruct>.freeze, [">= 0"])
+    s.add_development_dependency(%q<rspec>.freeze, ["~> 3.9.0"])
+    s.add_development_dependency(%q<bundler>.freeze, ["~> 2.2.3"])
+    s.add_development_dependency(%q<jeweler>.freeze, ["~> 2.3.9"])
   else
-    s.add_dependency(%q<zpng>.freeze, [">= 0.3.0"])
+    s.add_dependency(%q<zpng>.freeze, [">= 0.3.3"])
     s.add_dependency(%q<iostruct>.freeze, [">= 0"])
     s.add_dependency(%q<rspec>.freeze, ["~> 3.9.0"])
-    s.add_dependency(%q<bundler>.freeze, ["~> 2.1.4"])
+    s.add_dependency(%q<bundler>.freeze, ["~> 2.2.3"])
     s.add_dependency(%q<jeweler>.freeze, ["~> 2.3.9"])
   end
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: zsteg
 version: !ruby/object:Gem::Version
-  version: 0.2.1
+  version: 0.2.5
 platform: ruby
 authors:
 - Andrey "Zed" Zaikin
-autorequire: 
+autorequire:
 bindir: bin
 cert_chain: []
-date: 2020-01-14 00:00:00.000000000 Z
+date: 2021-12-07 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: zpng
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: 0.3.0
+        version: 0.3.3
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: 0.3.0
+        version: 0.3.3
 - !ruby/object:Gem::Dependency
   name: iostruct
   requirement: !ruby/object:Gem::Requirement
@@ -58,14 +58,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 2.1.4
+        version: 2.2.3
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 2.1.4
+        version: 2.2.3
 - !ruby/object:Gem::Dependency
   name: jeweler
   requirement: !ruby/object:Gem::Requirement
@@ -80,7 +80,7 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: 2.3.9
-description: 
+description:
 email: zed.0xff@gmail.com
 executables:
 - zsteg
@@ -176,7 +176,7 @@ homepage: http://github.com/zed-0xff/zsteg
 licenses:
 - MIT
 metadata: {}
-post_install_message: 
+post_install_message:
 rdoc_options: []
 require_paths:
 - lib
@@ -191,9 +191,8 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubyforge_project: 
-rubygems_version: 2.7.6
-signing_key: 
+rubygems_version: 3.2.22
+signing_key:
 specification_version: 4
 summary: Detect stegano-hidden data in PNG & BMP files.
 test_files: []