RickdeJager/stegseek
:zap: Worlds fastest steghide cracker, chewing through millions of passwords per second :zap: observed · 2026-08-28
Health v2 · maintenance only
23/100
- Activity 0
- Release rhythm 8
- Longevity 100
How is this computed?
round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-09-02. Adoption (stars, forks) is never an input.
- gap_med: n/a
- age_days: 2134
- days_rel: n/a
- days_push: 1058
- n_releases_24m: 0
Adoption not part of the score
1288 stars · 130 forks observed · 2026-08-28
What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded
Stegseek is a lightning-fast command-line cracker for steghide steganography, built as a fork of the original steghide project that can test millions of passwords per second (cracking rockyou.txt in under 2 seconds). It can also brute-force steghide's random seed to detect hidden content and extract unencrypted embedded data without knowing the password (CVE-2021-27211).
Use cases
- crack a steghide password on a jpg or wav file with a wordlist
- extract hidden data from a steghide-encoded image
- check whether a file actually contains steghide data without a password
- brute force steganography passwords millions of times per second
- solve CTF steganography challenges with stego in images
- recover an embedded file from a steghide image that was hidden without encryption
- run a fast steghide cracker from a Docker container or Linux CLI
When to choose
- You need to crack steghide passwords against a wordlist like rockyou.txt as fast as possible
- You want to detect whether a file contains steghide data or extract unencrypted payloads without the password
- You are working CTF challenges or pentest engagements involving steganography
- You want a lightweight CLI tool installable via .deb package or Docker on Linux/WSL
When to avoid
- You need to hide/embed data with steghide rather than crack it - use the original steghide tool
- You need to crack steganography from other tools such as outguess, zsteg, or openstego - Stegseek only targets steghide
- You need a native Windows or GUI application - it only runs on Linux, via WSL, or in Docker
- The hidden data was encrypted with a strong password that is not in any wordlist
Facets
cli-tool · maturity stable
security penetration-testing cryptography cli security penetration-testing image-processing windows cli steganography steghide password-cracking brute-force ctf-tools stego digital-forensics wordlist-cracking seed-bruteforce linux docker
1 source
- readme: https://github.com/RickdeJager/stegseek · fetched 2026-08-28 · 50010c4d1be0
Member repositories
| Repository | Role | Health v2 |
|---|---|---|
| RickdeJager/stegseek | main | 23 |
For agents
markdown · JSON · MCP: product_card(name="RickdeJager/stegseek")
Data as of 2026-08-30T08:39:29.467469+00:00 · Report a problem