Lab Solution Download the stools4.zip file from http://www.jjtc.com/Security/stegtools.htm – Finland and extract

Lab Solution

Download the stools4.zip file from http://www.jjtc.com/Security/stegtools.htm – Finland and extract its content to a new directory C:\S-Tools4.

Start S-Tools 4 by double-clicking on the S-Tools.exe file.

Drag and drop the Stega01.bmp file to the S-Tools main window.

Next, drag and drop the DocumentToHide.doc file to the Stega01.bmp window inside S-Tools to conceal the Word document within the BMP file.

Type a passphrase to protect your file and select the encryption algorithm you want to use. After that, click on OK to proceed.

Right click on the hidden data window and click on Save as… to save the resulting file.

Type a new for the new file and click on Save.

A new “Hidden.bmp” file was created protecting the DocumentToHide.doc file.

This new file looks similar to the original file and has the same size.

Next, to extract the concealed file, drag and drop the Hidden.bmp file into the main window of S-Tools.

Right click on the Hidden.bmp window and click on Reveal.

Type the correct passphrase, select the appropriate encryption algorithm, and click OK to reveal the concealed file.

Right-click on the revealed file and click on Save As. Select a location where to store the file and click on Save.

Close all windows.

Download the Data Stash v1.5 installer file from http://www.skyjuicesoftware.com/software/ds_download.html and install it on your computer.

Start Data Stash v1.5.

Select Stash and click on Go!.

Drag and Drop the Stega01.bmp file to Data Stash as the vault file.

Next, drag and drop the DocumentToHide2.doc file to Data Stash as the stashed file.

Note: Since we are working with an evaluation version of Data Stash, we can only stash files up to 100Kb.

Click on Advanced Options to specify additional options such as the level of compression and the password used to protect the resulting file.

Mark the Backup vault file option and click on Stash.

Close this window.

A Stega01_backup.bmp file was created to preserve the original image file.

Now, to extract the concealed file, go back to Data Stash initial window, click on De-Stash, and click on Go!.

Drag and drop the Stega01.bmp file to Data Stash as the vault file.

Click on De-stash the Vault.

Select the destination location and click on OK.

Enter your password and click on OK.

The DocumentToHide2.doc file has been successfully recovered.

Close all windows.