Steganography: hiding messages inside images using Steghide

What is Steghide?
Steghide is a command-line tool used for steganography, which is the practice of hiding secret data inside files like images or audio files. It allows you to embed and extract hidden information from JPEG, BMP, WAV, and AU files while keeping the original file looking unchanged.

Key Features of Steghide
✅ Hides data inside images and audio files without visibly altering them
✅ Uses encryption (AES-128 by default) to protect the hidden data
✅ Compresses data before embedding to save space
✅ Preserves the original file format and properties, making detection harder.

[mai mult...]

Extract hidden metadata from Files with ExifTool

Ever wonder what hidden info might be lurking inside an image or document? Many files store metadata—like camera details, GPS coordinates, timestamps, and even usernames—without the owner realizing it. With ExifTool, you can pull out this data in seconds.

ExifTool is a command-line tool used to extract, analyze, and modify metadata in files like images, PDFs, and videos. Metadata includes hidden details such as:

  • Camera info (model, lens, settings)
  • Timestamps (creation, modification dates)
  • GPS coordinates (where a photo was taken)
  • Software used (Photoshop, MS Word, etc.)

It’s pre-installed in Kali Linux and widely used in digital forensics, OSINT, and privacy audits.

[mai mult...]

Run open-source LLMs Locally using Ollama on Linux

Ollama is an open-source tool that lets you run Large Language Models (LLMs) locally on your computer. It provides an easy way to download, run, and interact with AI models without needing cloud services.

A Large Language Model (LLM) is a type of AI model trained on massive text datasets to understand and generate human-like text.

Examples of LLMs:

Llama 3 (Meta)
Mistral 7B (Mistral AI)
Gemma 2B (Google DeepMind)
GPT-4 (OpenAI, not open-source)

[mai mult...]

How to build a custom Wordlist using Cewl

Objective: Use the cewl tool to generate a custom wordlist from a website for use in password attacks when pentesting.

If you’re looking to crack a password, you’ll need a solid wordlist to start with. But not just any wordlist—one that fits the target you’re trying to crack. Kali Linux has a tool called cewl that can help you make a custom wordlist by crawling a website.

Why should you use cewl?

You can use it to gather words from the site, like blog post titles, common terms, and metadata. This custom wordlist would be way more effective than using a generic list.

[mai mult...]