Cybrary ForgeCYBRARY / FORGE

StegSolve

v1.4Caesum

The Java image analyzer CTF players live in: cycle per-channel bit planes, gray bits, color inversion and random color maps until hidden pixels become readable, then pull the payload out of the data-extract pane.

Category
Data decoding, cryptanalysis & analysis
Package
stegsolve
Runs on
Linux · Windows
Commands
stegsolve

Renders a deterministic image generated from the simulated file. Planes carrying an authored payload render it as readable pixels; nothing is uploaded.

Install it

The scripts below install the real Caesum package on your own machine — read them first, and run them somewhere you are allowed to change. Inside the range, one press puts the simulated package on your next machine.

Linux installer (shell script)
install-stegsolve.sh

StegSolve is delivered as Release archive, so it cannot be installed unattended. Follow the steps on the package page instead.

Windows installer (PowerShell)
Install-stegsolve.ps1

StegSolve has no unattended Windows install. Follow the steps on the package page.

On a range machine
Add it to your kit and every machine you launch comes with it.

On Linux

Release archive

  1. Fetch the release and check its signature

    Compare the published checksum before unpacking anything.

  2. Unpack it under /opt
    sudo unzip stegsolve.zip -d /opt/
  3. Put the launcher on PATH
    sudo ln -s /opt/stegsolve/stegsolve /usr/local/bin/stegsolve

Check it worked

  1. Confirm it landed on PATH
    which stegsolve
  2. Check the version
    stegsolve --version

    The range reports 1.4.

Remove it

  1. Take it off again
    sudo apt remove --purge stegsolve

On Windows

Release archive

  1. Unblock the download first
    Unblock-File .\stegsolve.zip

    Windows marks anything from the internet; unblock it or the extract fails.

  2. Unpack it under C:\Tools
    Expand-Archive .\stegsolve.zip -DestinationPath C:\Tools\stegsolve
  3. Put it on PATH
    setx PATH "$env:PATH;C:\Tools\stegsolve"

Check it worked

  1. Confirm it resolves
    where stegsolve
  2. Check the version
    stegsolve --version

    The range reports 1.4.

Remove it

  1. Take it off again
    Remove-Item -Recurse -Force C:\Tools\stegsolve

Inside the range

  1. Tick it on the launch screen

    Under StegSolve's category on the advanced tool shelf. A lab that depends on it locks the toggle on and says why.

  2. Or install it from a range terminal
    sudo apt install -y stegsolve

    The simulated package manager seeds the same binaries, config and receipt the shelf toggle does.

  3. Everything here is simulated

    No software is downloaded and nothing executes — the range answers from authored fixtures.

Labs that use StegSolve

No lab locks this one on yet — tick it on the launch screen and take it into any scenario.