HomeОбразованиеRelated VideosMore From: Tinkernut

Hacking Tip: Hide Secret Files In Plain Sight

1603 ratings | 165875 views
📖📕 GET THE NEW TINKERNUT BOOK: http://bit.ly/Tinkernutbook 📕📖 This video covers the art of steganography, or hiding messages in plain sight. The three methods covered are hiding files on Microsoft documents, hiding files inside pictures, and hiding messages inside Twitter messages. http://www.irongeek.com/i.php?page=security/ms-office-stego-code http://sourceforge.net/projects/hide-in-picture/ http://www.irongeek.com/i.php?page=security/unicode-and-lsb-stego-code
Html code for embedding videos on your blog
Text Comments (354)
ElecKtro Vlog Sciene (23 days ago)
Youguys a sodub that  don't otic te type f yor etters his is cutalyor almot everycomments a meageno sense hate lnux sill like to use it now what i mean is i'm so meanz to you now !
Gaming Dave (1 month ago)
TELL ME! hwat is this trickery ahhhahahahahhahahahahahahhahahahhahahahhahahahhahahahhahahaahahahhahahahhahahhahahahahahhahahhahahhahahhahahahahhahahahahahahhahahahahahahhahahahaha
Obada Brickey (3 months ago)
hide your porn in a folder, change it's name and icon to Internet Explorer
Zander Ross (1 year ago)
THIS IS NORMAL AL IT AL IT AL IIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIILLL
Zander Ross (1 year ago)
I DONT LIKE LINUX....................................................... Are you reading this just look at others! dontdontdont look at me dont look at me dont look at me dont look at me dont look at me dont look at medont look at medont look at medont look at medont look at medont look at medont look at medont look at medont look at medont look at medont look at medont look at medont look at medont look at medont look at medont look at medont look at medont look at medont look at medont look at medont look at medont look at medont look at medont look at medont look at medont look at medont look at medont look at medont look at medont look at medont look at medont look at medont look at medont look at medont look at medont look at medont look at medont look at medont look at medont look at medont look at medont look at medont look at medont look at medont look at medont look at medont look at medont look at medont look at medont look at medont look at medont look at medont look at medont look at medont look at medont look at medont look at medont look at medont look at me
Benjy Linux (1 year ago)
Heres some info for you Tinkernut
BenTheTechGuy (1 year ago)
Hello people of the comment section, have a very nice day. Kepp on scrolling, I SAID KEEP ON SCROLLING OR DIE, I hope you have a very nice day AND IF YOU DON'T SCROLL DOWN, A VERY BAD DAY, and I hope that you have a nice life. If today is your birthday is today, than congratulations! UNLESS YOU DON'T SCROLL! And if you are over 95 years old and still alive, I congratulate you! Kepp on living! AND SCROLLING!!! My dad said that if I don't stop typing, he'll slam my face into the keyboard wdlof;juerpjkgfhhdrfjsfdngjkdfhgjdfhgjkdfhglsdgjhdfjkghlsfghsjkdfhglkjhdfslgkjhdsjkhdljkfhgjksdfhgksdfhkgjlhsdgkjhsdkjghsdjkghsdlkjhgkjdshglkjdjkhdlgkhsdjkghdjlkfhsdjkghsjdkhglkdjhfgjkdhfgjkhsdfjkghdfjglhsdhgljkdfhglshdgjhsl Hopefully you kept on scrolling. OR I'LL KILL YOU!!!
Justin Z. (1 year ago)
yes
nathan mcbride (1 year ago)
This was released in 2010?? Now I feel old
Sam Squids (1 year ago)
for some odd reason. I downloaded the message decoder and my av said it was a threat. any explanation?
MarkusTegelane (10 months ago)
Sam Squids antivirus probably giving a false positive for some reason
Coder Kid (1 year ago)
Do not decode because there is NO secret message and I Definitely do not like bagels because  well um...
disdia (2 years ago)
I will give you 20 dollars Paypal if you solve this cipher for me: wawawejfaefajewfjwerfawkjfjaerkfgjaergjaerjkgjerakgjaefjkerfjaejrgkregjdfjawkefjkaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaawawawejfaefajewfjwerfawkjfjaerkfgjaergjaerjkgjerakgjaefjkerfjaejrgkregjdfjawkefjkaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaawawawejfaefajewfjwerfawkjfjaerkfgjaergjaerjkgjerakgjaefjkerfjaejrgkregjdfjawkefjkaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaawawawejfaefajewfjwerfawkjfjaerkfgjaergjaerjkgjerakgjaefjkerfjaejrgkregjdfjawkefjkaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaawawawejfaefajewfjwerfawkjfjaerkfgjaergjaerjkgjerakgjaefjkerfjaejrgkregjdfjawkefjkaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaawawawejfaefajewfjwerfawkjfjaerkfgjaergjaerjkgjerakgjaefjkerfjaejrgkregjdfjawkefjkaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
Johnny Ray (2 years ago)
Right click a folder and click properties. Then click the "hidden" checkbox in the attributes section. The only drawback is anyone can find it if they know the ins and outs of Windows. To decode the folder or to "show it" open windows explorer and click on the organize button, then click "folders and search options". Switch to the view tab and click "Show hidden files, folders, and drives". And then your done!
I luv you more than anyone on this   planet
ray hendrick (2 years ago)
lol i am cool since  i am cool since i am cool since  i am cool since  i am cool since  i am cool since  i am cool since  i am cool since  i am cool since  i am cool since  i am cool since  i am cool since  i am cool since  i am cool since  i am cool since  i am cool since i am cool since  i am cool since  i am cool since i am cool since i am cool.
erkubee (2 years ago)
the video got removed
ray hendrick (2 years ago)
nothing to see here, pease pass along. I SAID PASS ALONG FUCKHEAD THERES NOTHING TO DO WITH UNISTEG
Chilli .ڑ (2 years ago)
the unicode method looks seriously fucked up while viewing it on mobile
MrHatoi (2 years ago)
Would the first method work with an .exe file too?
Petrozilly (2 years ago)
Or just use a pen and paper
Vanilla Voodoo (2 years ago)
How will that help digitally?
Hercule S (2 years ago)
Hiding a song in a picture file is interesting, though it would be obvious something is up since most picture files won't be 4+ MB. How would you split the files back into two separate files without using a Hex Editor to cut & paste the data from the picture file into a separate file?
Will Mccartha (2 years ago)
METHOD2 NOT WORKING!
Cassiel's Stuff (2 years ago)
Nothing to see here! This is just a normal message. You know the ones? Anyway, On with the message. Blah blah blah blah blah blah blah blah blah blah blah blah blah blah blah blah blah
Ed E (3 years ago)
I have a secret message hiden in here... SEARCH FOR UNISTEG ONLINE TO DECODE THIS! ..........................................................
Pshivvy (3 years ago)
Try using DeepSound, its an amazing software
TrueDesire Elements (3 years ago)
You are a great person to share this stuff with us and we truly appreciate all your efforts. I can't tell you how after watching your videos I want to do so much more. For the longest time I was sending message in braille within pictures as hidden messages for some folks to figure out.
Ed E (3 years ago)
+TrueDesire Elements You are awesome!
OH MY GOD!!! (3 years ago)
I used the LSB method all the time to make 7-Zip SFX archive files. Problem?
Juan Gonzalez (3 years ago)
This is insane!
John Smith (3 years ago)
I've been using tthe cmd attrib to hide stuff for awhile. Is there a way to automate it with a batch file?
You think i will put this message like the people who get styles and designs here? No
Nuxx (3 years ago)
Appaarently, Scott Cawthon used a type off metthod in his info on FNaF 3, wheerre you taake any message, and read tthroough the scrriipt you put the messsaage in, and every time you ffind a lettteerr that is in yyoouur message, put another letter of the same next to that letter. For example: LOOK IN THE TEXT I JUST WROTE
Generic Spoofies (3 years ago)
*proceeds to decode this because he wants to. Don't decode this to show off you are a skript kittie thats not cool bra.
AssossaGPB (3 years ago)
Very cool ideas, I never knew about the MS Word or Text thing. Now I can use it on all my friends and confuse them :D Lorem ipsum dolor sit amet, consectetur adipiscing elit. Mauris sed lectus vel ipsum mattis luctus. Donec facilisis porta nunc, malesuada convallis leo vulputate sed. Phasellus porttitor pellentesque pharetra. Sed commodo ligula tellus, sed bibendum purus tempor ac. Aliquam maximus maximus fermentum. Vivamus tincidunt felis at ipsum vestibulum tempor. Nam elementum.
ItzJovikTheCrazy (3 years ago)
... /(OoO)\
Flakysuki (3 years ago)
+Jovik7_ MC come on man he use toatster to type this
ItzJovikTheCrazy (3 years ago)
+AssossaGPB Eh..Nani?
Max Skripp (3 years ago)
guess what you cant decode this message you know why lets see. if you arnt it you will have decoded this message
Benjy Linux (1 year ago)
he is not stupid
Big_Al KS (1 year ago)
Max Skripp Idiot is the password
EstebanZD Glitcher (3 years ago)
I convert a song to a picture, but it doesn't work for me, and I don't wnat to use external programs that only allows you to use them for decoding, HELP
cd5ssmffan (4 years ago)
Aha so thats how people put viruses in email attachments and downloads
Ty The Potato (3 years ago)
Nah, they just bundle it in a fake installer
ShifterCZECH (4 years ago)
I can't play music file with image :(
Anony Mouse (4 years ago)
base64 also works...
Anony Mouse (3 years ago)
+DivideByZero Why the fuck would somebody post a base64 code on twitter. the purpose of this video is to encrypt a private message. something like adding an extra layer of security to a skype message or an email
DivideByZero (3 years ago)
+Anony Mouse ok so lets say you post this on twitter. people are gonna ask, huh? what is this? it will raise suspicioness.
Anony Mouse (3 years ago)
+DivideByZero maybe by not saying you're encoding a message with base64?
DivideByZero (3 years ago)
+Anony Mouse how will you make it not obvious?
Anony Mouse (3 years ago)
+DivideByZero well now it's obvious because you made it obvious.
neville2312 (4 years ago)
One day i will post this competion ----------------------------------------------------------------------------------------------------------------------------------------------- Now this is not an encoded message but there are 3 clues around YouTube on 3 YouTube Videos, There is only 1 winner who can win this easter egg game. The aim of the game is to be the fastest person to decode the 3 clues. Since the clues are on 3 Videos on YouTube they have to work what videos they are on  from all of the YouTube Videos on the internet. I will not answer any comments the instructions are very clear. Go for it ;)
Bailey's Furniture (4 years ago)
For just passing along secret messages, I find that the Fourier Watermark method works quite well for fun purposes.
Privilege (4 years ago)
This is a normal message, don't try and decode this. Now go away and look at other comments after liking
S. Ram. (4 years ago)
I'm trying the hide in picture in windows 8.1 and it wont let me change the .jpg image to a .docx document... what else do I need to do?
Hachiro (4 years ago)
aww. the hide in picture method that you showed us doesn't work on Ubuntu xD gonna search online =3
Hessam Yousaf (4 years ago)
can't play the audio after changing the extension from JPG to MP3.... Any help?
Treven McKeone (4 years ago)
QIK(ONUTBJYVUBSYHJNGQSJNJVTGDYRTBUWINM*ISOIK**ANBJSHTJUWKIHSN&*IKAH&JYSNLOJNBKWNBLKJ UTYHDBV &HBJ &YUNIBNE*H^B&IHJOHBEYUUN&WUIND
ShadowMassacr13 (4 years ago)
The whole changing file extensions thing works with any extension, if you have a JPG and you change it to .random, it becomes unreadable by windows (but not by linux because linux gives zero cares what extensions a file has) and you lose absolutely no data
KJP12 (4 years ago)
Please note, there is corrupted text coming, in quotes: "Hey, this does work, well the UniSteg. If you do forget to add the rest, well then, there is a secret message in this message! If you can get it, you can able to get the whole thing.                                                                                                                                                                                                             DON'T FORGET ANY PART OF THIS TEXT!" Also Youtube is messing up. Original Text: Hey, this does work, well the UniSteg. If you do forget to add the rest, well then, there is a secret message in this message! If you can get it, you can able to get the whole thing.                                                                                                                                                                                                             DON'T FORGET ANY PART OF THIS TEXT!
neville2312 (4 years ago)
Oh, look, there is a CREEPER TO EXPLODE!
Emir Tekin (4 years ago)
I AM NOT A IDIOT................................................................
M A (4 years ago)
if you want to hide text that only you can view copy the text below and paste it in notepad and make changes at lines 6,7,8 and 11 (at line 6 change username to your username and at lines 7 and 8 change password to your own password and at line 11 type a message, when saving the file name it anything once you name it .bat at the end and save it as a batch file. open the file and type in the password that you were supposed to change at line 7 and 8 and you will see whatever you typed at line 11 to change the password or the message open the file on notepad if someone else opens the file it would look like a normal cmd window to them @echo off :top echo Microsoft Windows [version 6.1.7.601 echo Copyright c 2009 Microsoft Corporation.  All rights reserved echo. set /p input= C:\Users\username if %input% == password goto correct if not %input% == password goto command prompt :correct echo (enter a message here without brackets) echo. echo press a to hide or any other key to quit set /p finish= if %finish% == a goto command prompt :command prompt set Programm=cmd.exe tasklist |find /i "%Programm%" [>]nul if %errorlevel% == 0 ( taskkill /IM %Programm% ) else ( start %Programm% )
Honor Cameron (4 years ago)
I did this with images, i ran them through textedit for mac and put some words and things, and then i saved it again and it looked like some glitch art (because it's basically combining steganography and glitch art together).
Hwary Srkmidfo (4 years ago)
how you make this video like this . any software
Dimitrios Papageorgiou (4 years ago)
I'm trying to do the second one but it says "The system cannot find the file specified", any idea why is that?
Tom (4 years ago)
+Shymon Samsel I think that you`re trying to lie to us. I ran this text through UniSteg and I get "LINUX IS AWESOME". Also, this is a normal text, ignore weird looking letters. I got a weird keyboard and... this is result. There is no need to run this through UniSteg.exe. SLENDER MAN IS DESTROYING EVERYONES COMPUTER. IRONGEEK AND TINKERNUT IS AWESOME!!!                    
Tom (3 years ago)
I tried it before, and it's awesome! And I'm using it now!
KJP12 (4 years ago)
+K-joy-programer12 Also I went on to my VM, and the hidden message says: "LINUX SUCKS! WINDOWS ROCKS! AND MAC OS X TON"  Try it.
KJP12 (4 years ago)
Decode: "I think at you're trying to lie to us. I ran this text through UniSteg and got '"Linux is AWESOME"'. Also, this is a normal text, ignore weird looking letters. I got a weird keyboard and this is the result. There is no need to run this through UniSteg.exe. Slenderman is destroying EVERYONE's COMPUTER. You (are a/on) Geek, and Tinkernut is AWESOME!" Yep, just completely got rid of spaces. The '" "' is the text inside text.
Privilege (4 years ago)
soo sexy you are me boi i am telling u that i ame doge adventure - the clip
B. Igić (4 years ago)
Svaka cast Vucicu, za samo par meseci je svojim predanim radom ...i pozrtvovanjem doprineo da veliki broj ljudi oseti nesto novo na politickoj sceni..nesto sto ce uspostaviti red i postenje...u Srbiji koja je bila prekorumpirana. Miskovici i Djuraskovic stekli su milione na racun drzave i sada je doslo vreme da poloze racune. Miskovic je pre trebao da razmislja i brine o sinu pre nego sto ga je upetljao u sve .
Gaming Dave (1 month ago)
We will not forgive you for Feketic and Obrenovac
srpska zabava (1 year ago)
Necemo ti oprostiti za Feketic i Obrenovac
ray hendrick (4 years ago)
when i right-click there is no option called 7-Zip, So How Do I Rename It As A .docx?
NotNite (4 years ago)
7-Zip is a program you need to install.
DarkyDaFool (4 years ago)
+Doge Woof That's a trick everybody pretty much knows. I just said 7-zip because it has the same functionality and is released as free.
KJP12 (4 years ago)
+Doge Woof I know.
Privilege (4 years ago)
+K-joy-programer12 I used the trial of winRar and when it ended, it sorta glitches out so I have the full for free
KJP12 (4 years ago)
Or you can use WinRar, or Winzip as well. Though, it may not be the same as 7-zip.
ray hendrick (4 years ago)
DO NOT: Decode This OR You Are In For A Nasty Suprise, I Mean it                                                                                                                                                                                                                                                                                                                                                                                                                                                                
Guest 1337 (4 years ago)
DO NOT DECODE THIS! I WARN YOU.... YOU STILL HERE?
ray hendrick (4 years ago)
+Boško Igić i told you NOT to
B. Igić (4 years ago)
Result (swears censored): F*** YOU YOU FU**ING B**CH YOU DECODED THIS YOU FA**OT!!! FAK P
ray hendrick (4 years ago)
Thanks This Really Helped! I Will Watch More Of Your Videos! BTW, This Is Ordanary (Sorry For Spelling) Anyway, This Is Normal Text, No Need To Put This In Unisteg.exe, I Mean It! Don't Put This In Unisteg, This Is Normal Text, Serously! I Mean It!!! I Put This In Unisteg (Not My Comment) And Got "LINUX IS AWESOME" (I Didnt Say That): "This is totally normal text, nothing suspicious here... Just ignore all of this text and look at other comments please. Just ignore this"
B. Igić (4 years ago)
I Watched all of your videos... -.-
ray hendrick (4 years ago)
+Shymon Samsel Linux is NOT awesome
Shymon Samsel (4 years ago)
This is totally normal text, nothing suspicious here... Just ignore all of this text and look at other comments please. Just ignore this
Benjy Linux (1 year ago)
i decoded, it says LINUX IS AWESOME. I totally agree
Coder Kid (1 year ago)
I decoded it and I agree.
Benjamin Gagne (5 years ago)
This is just a normal comment passing though, that's all ;)
angia (4 years ago)
I DONT EVEN KNOW ERMEHGERD HELP MEEEEEEEE ARRRRRGHHHH ;-;
zeHatWearingMan (5 years ago)
also the unisteg doesnt work, it gives me the error, that twitter only alows 140 character, you currently have 112...
zeHatWearingMan (5 years ago)
the file hidden inside of a picture doesnt work for me, the mp3 cannot be played, media error, 
Hessam Yousaf (4 years ago)
+GusenbauerAffe doesn't work for me with VLC either.. :( any suggestion?
GusenbauerAffe (5 years ago)
Happened to me as well, it's cuz Win Media Player sucks, it does work with the VLC Player tho
Agentleader1 (5 years ago)
I have just now made a program that will make do LSB Steganography easily. This program is simple to use, try it!  https://www.dropbox.com/sh/gm1cupv54krctn3/49eh2Hioaq
Agentleader1 (5 years ago)
@StupidGamer are you british?
Mr. Frog (5 years ago)
lol 360 comments...
Mr. Frog (5 years ago)
yep
Cokemonster (5 years ago)
YOU JUST HAD TO RUIN IT
MrSubernPerson (5 years ago)
Lol yeah the NSA SUUUURE isnt gonna find out your files XD
You will go to the NSA Jail.
StupidGamer (5 years ago)
Nothing to see here, just a normal comment. A'right, piss off, will ya? Second warning, buddy..... Third warning, mate. That's it. THROOOOOOOW THEEE CHEEEEEEEEEEEEEEEEEESSSSSEEEEEEEEEEEEEEEEEEEEEEEEEE
striker striker (5 years ago)
um i know how to make a invisible file with no downloads lol its awsome thx for the tricks.
F/A-18 Hornet (5 years ago)
and that worked
F/A-18 Hornet (5 years ago)
this didn't work for me, however I used the following command "copy /b /v my_pic.jpg + my_song.mp3 mynewpic.jpg"
DraconianDragon (5 years ago)
XÐÒæ@Òæ@Š ’†@Îïod job gigafide!!!
Minecraft+Steam (5 years ago)
not to hard... can be done without! Just read well! It wil help if you know the maker of the code. Then it's just thinking of possibility's and done!
UTMOST (5 years ago)
That was easy! Everything I see, looks like that! :)
I have an awesome name (5 years ago)
Doesnt this work? aaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
I have an awesome name (5 years ago)
"XÐÒæ@Òæ@Š ’†@ÎÞÞÌ job gigafide!!!" ?
Hex Luther (5 years ago)
I am Sloan. Remember me?
WTE Media (5 years ago)
Hello this is a normal comment so go away
Mutant64 (5 years ago)
XÐÒæ@Òæ@Š ’†@ÎÞÞÈ@ÔÞÄ@ÎÒÎÂÌÒÉe!!! ?
Canno (5 years ago)
how do you do that lol?
ArchaicBubba (5 years ago)
instead of hiding a another file in the .jpg hide a .zip or .rar folder in it you can update it when ever you want hide multiple files in the same image and you don't have to change the files extension you can just open it with win rar or 7zip to update it
InAndOutLand (5 years ago)
C a n y o u s t o p t h a t?
zomege (5 years ago)
Innocent conversation is soooo great isn't it :) I just love talking in youtube.
Toomsan (5 years ago)
How are you? Nice commen!!!!!!!!!!!!!!!!!!!!!!!!!!!! Really nice!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
Buttercup (5 years ago)
i suggest using true crypt it like this except alot easier
iOSTechStuff (5 years ago)
Just  a random youtube comment nothing random about it but its secret i hope you dont figure out its secret because i dont want you to for no reason now please try to decode this comment because you will like what it says so just go to the website in the description to get the link to decode this
senorfap (5 years ago)
You sound like you have glasses
dup (5 years ago)
by 'this way' i mean hiding in plain sight. i changed the file folder icon to an invislbe .ico file and made it and the sub files hidden.
dup (5 years ago)
I hid my porn folder this way. the 'recent places' folder was my downfall. Hidden file shortcuts aren't hidden /facepalm
aseifca21 (5 years ago)
sorry didnt see that you already got it.
aseifca21 (5 years ago)
at the cmd prompt you would just type h:
shug mccormack (5 years ago)
yea a lot of heavy rock LPs done this .... TIP ... WRITE IN WHITE FONTS .. PAGE LOOKS BLANK
H98342mfan asdf9892nmd (5 years ago)
A Beatle's song played backwards says "Paul is dead, miss him, miss him."
H98342mfan asdf9892nmd (5 years ago)
nevermind figured it out
H98342mfan asdf9892nmd (5 years ago)
For the LSB hiding, if I want to use a picture and mp3 found in a folder in an external drive (H), how would I designate that in the cmd program. I obviously can't use the C drive.
Juan Gonzalez (5 years ago)
oh, I understand, the more you use, the better it gets and sometimes you have to improvise to keep things going.
Jacketnipple (5 years ago)
"HEY PAUL"
SajeOne (6 years ago)
Would something like codec matter? I did everything as it was said and all my media players give me an error when trying to play it with the .mp3 extension. The original files are a .jpg and a .mp3
Triston Li (6 years ago)
You change the extension to .mp3
William Gingerich (6 years ago)
how do you play back music from .jpg ???
ASDF-5190 (6 years ago)
yes I sure will!
ASDF-5190 (6 years ago)
That's very nice of you to say.

Would you like to comment?

Join YouTube for a free account, or sign in if you are already a member.