ST3GG Example Files

March 30, 2026 · View on GitHub

Pre-encoded steganography samples for testing the Agent tab's Exhaustive Mode and other decoder tools without having to encode files yourself.

All new examples (Plinian divider series) encode the secret message:

⊰•-•✧•-•-⦑/L\O/V\E/\P/L\I/N\Y/⦒-•-•✧•-•⊱

Original Examples

FileTechniqueWhat's Hidden
example_lsb_rgb.pngLSB RGB 1-bit (STEG v3 header)Text message embedded in pixel LSBs
example_png_chunks.pngPNG tEXt chunksSecret messages in metadata chunks
example_trailing_data.pngTrailing data after IENDData appended after PNG end marker
example_metadata.pngPNG metadata (base64 + hex)Encoded strings in Description/HexData fields
example_zero_width.txtZero-width UnicodeInvisible characters between visible text
example_whitespace.txtWhitespace encodingHidden bits in trailing spaces/tabs
example_invisible_ink.txtUnicode tag charactersInvisible ink using U+E0000 range
example_audio_lsb.wavAudio LSBMessage in least significant bits of audio samples

Image Formats (Plinian Divider)

FileTechniqueWhat's Hidden
example_lsb.bmpBMP LSB RGBPlinian divider in pixel LSBs
example_comment.gifGIF comment extensionPlinian divider in GIF comment block
example_lsb.gifGIF palette index LSBPlinian divider in palette index LSBs
example_metadata.tiffTIFF metadata (base64)Plinian divider in TIFF description tag
example_lsb.tiffTIFF LSB RGBPlinian divider in pixel LSBs
example_lsb.ppmPPM (Portable Pixmap) LSBPlinian divider in raw pixel LSBs
example_lsb.pgmPGM (Portable Graymap) LSBPlinian divider in grayscale LSBs
example_hidden.svgSVG XML comments + attributesPlinian divider in comments, data-attrs, metadata
example_lsb.icoICO LSB RGBPlinian divider in icon pixel LSBs
example_metadata.webpWebP EXIF metadataPlinian divider in EXIF ImageDescription
example_lsb.webpWebP lossless LSBPlinian divider in pixel LSBs

Document & Structured Data Formats (Plinian Divider)

FileTechniqueWhat's Hidden
example_hidden.htmlHTML comments + zero-width + hidden divsPlinian divider in comments, meta tags, invisible elements, zero-width chars
example_hidden.xmlXML comments + CDATA + PIsPlinian divider in processing instructions, CDATA, attributes
example_hidden.jsonJSON metadata fieldsPlinian divider in base64, hex, and direct Unicode fields
example_whitespace.csvCSV whitespace encodingPlinian divider in trailing spaces/tabs per row
example_hidden.yamlYAML comments + byte tablePlinian divider in comments, base64, hex, and per-byte references
example_hidden.pdfPDF metadata + streams + post-EOFPlinian divider in XMP metadata, content streams, and after %%EOF
example_hidden.rtfRTF hidden text groupsPlinian divider in \v hidden text, info fields, bookmarks
example_hidden.mdMarkdown HTML comments + zero-widthPlinian divider in HTML comments, link references, zero-width chars

Audio, Binary & Archive Formats (Plinian Divider)

FileTechniqueWhat's Hidden
example_lsb.aiffAIFF audio LSB + annotationPlinian divider in sample LSBs and ANNO chunk
example_lsb.auAU (Sun/NeXT) audio LSBPlinian divider in sample LSBs and header annotation
example_hidden.zipZIP archive comment + trailingPlinian divider in archive comment and appended after ZIP
example_hidden.tarTAR PAX extended headersPlinian divider in pax header comment and custom STEG fields
example_hidden.gzGZip extra field + commentPlinian divider in FEXTRA and FCOMMENT header fields
example_hidden.sqliteSQLite hidden tablePlinian divider in _steg_payload table (direct, base64, hex)
example_hidden.hexdumpHex dump embedded bytesPlinian divider embedded at offset 0x40 in raw byte data
example_hidden.midMIDI SysEx + text eventPlinian divider in SysEx message and MIDI text event
example_hidden.pcapPCAP packet payloadsPlinian divider split across UDP packet payloads

Code & Config Formats (Plinian Divider)

FileTechniqueWhat's Hidden
example_hidden.pyPython comments + zero-width docstringPlinian divider in comments, hex byte table, zero-width docstring
example_hidden.jsJavaScript zero-width + commentsPlinian divider in zero-width chars between tokens, hex comments
example_hidden.cC comments + byte arrayPlinian divider in block comments and _cal_data[] array literal
example_hidden.cssCSS comments + pseudo-elementsPlinian divider in comments, ::after content, zero-width chars
example_hidden.iniINI comments + byte tablePlinian divider in comments and calibration byte entries
example_hidden.shShell whitespace + commentsPlinian divider in trailing whitespace and script comments
example_hidden.sqlSQL comments + byte checksumsPlinian divider in comments and per-byte checksum lines
example_hidden.texLaTeX commentsPlinian divider in TeX comments, base64, and hex
example_hidden.tomlTOML commentsPlinian divider in TOML comments, base64, and hex

How to Use

  1. Open ST3GG in your browser
  2. Go to the Agent tab
  3. Upload any example file
  4. Enable Exhaustive Mode for the most thorough analysis
  5. Run the agent and watch it find the hidden data

Unicode & Text Tricks (Plinian Divider)

FileTechniqueWhat's Hidden
example_homoglyph.txtCyrillic/Latin homoglyphsPlinian divider in Cyrillic letter substitutions (а vs a, с vs c, etc.)
example_variation_selector.txtUnicode variation selectorsPlinian divider in VS1 (U+FE01) presence/absence after letters
example_combining_diacritics.txtCombining Grapheme JoinerPlinian divider in invisible U+034F marks after letters
example_confusable_whitespace.txtUnicode space variantsPlinian divider in en/em/thin space substitution (2 bits per space)
example_emoji_substitution.txtEmoji pair encodingPlinian divider in emoji choice (🌑=0 vs 🌚=1, etc.)

Network Protocol Steganography (Plinian Divider)

FileTechniqueWhat's Hidden
example_dns_tunnel.pcapDNS query name tunnelingPlinian divider base32-encoded in DNS query labels
example_icmp_steg.pcapICMP echo payloadPlinian divider in ICMP ping request payloads
example_tcp_covert.pcapTCP covert channelPlinian divider in TCP ISN + timestamp option fields
example_http_headers.pcapHTTP header smugglingPlinian divider in custom X- headers, cookies

Image Format Tricks (Plinian Divider)

FileTechniqueWhat's Hidden
example_polyglot.png.zipPNG+ZIP polyglotValid as both PNG image and ZIP archive with secret.txt
example_filter_encoding.pngPNG scanline filter typesPlinian divider in per-scanline filter byte choice (None=0, Sub=1)
example_alpha_lsb.pngAlpha channel LSB onlyPlinian divider in transparency channel LSBs (RGB untouched)

Miscellaneous Techniques (Plinian Divider)

FileTechniqueWhat's Hidden
example_key_ordering.jsonJSON key sort orderPlinian divider in object key ordering (alphabetical=0, reversed=1)
example_capitalization.txtLetter case encodingPlinian divider in word-initial capitalization (lower=0, upper=1)
example_silence_interval.wavAudio silence timingPlinian divider in silence gap durations (short=0, long=1)

More Unicode & Text Tricks (Plinian Divider)

FileTechniqueWhat's Hidden
example_directional_override.txtBidi overrides (RLO/LRO)Plinian divider in directional control chars with PDF cancellation
example_hangul_filler.txtHangul filler (U+3164)Plinian divider in Korean invisible filler vs regular space
example_braille.txtBraille patterns (U+2800)Plinian divider bytes mapped to Braille Unicode block
example_math_alphanumeric.txtMath bold (U+1D400)Plinian divider in normal vs mathematical bold letter substitution
example_normalization.txtNFC vs NFDPlinian divider in Unicode normalization form choice per word
example_sentence_length.txtSentence word countPlinian divider in odd (=1) vs even (=0) word count sentences
example_word_choice.txtSynonym substitutionPlinian divider in synonym A (=0) vs synonym B (=1) selection
example_misspelling.txtTypo patternsPlinian divider in correct (=0) vs deliberately misspelled (=1) words

More Network Protocol Steganography (Plinian Divider)

FileTechniqueWhat's Hidden
example_ttl_covert.pcapIP TTL covert channelPlinian divider bytes encoded directly in IP TTL field values
example_ipid_covert.pcapIP ID field encodingPlinian divider 2 bytes per packet in IP Identification field
example_tcp_window.pcapTCP window sizePlinian divider 2 bytes per packet in TCP window size field
example_tcp_urgent.pcapTCP urgent pointerPlinian divider in TCP URG pointer with URG flag set
example_dns_txt.pcapDNS TXT recordPlinian divider base64-encoded in DNS TXT response record
example_covert_timing.pcapCovert timing channelPlinian divider in inter-packet delays (10ms=0, 50ms=1)
example_multibase.txtMulti-base encodingPlinian divider in base16, base32, base64, and base85
example_morse.txtMorse codePlinian divider encoded in dot-dash Morse alphabet

Advanced Image Techniques (Plinian Divider)

FileTechniqueWhat's Hidden
example_pvd.pngPixel Value DifferencingPlinian divider in adjacent pixel pair difference parity
example_histogram_shift.pngHistogram shiftingPlinian divider via peak pixel value shifting (peak=0, peak+1=1)
example_lsb_4bit.pngLSB 4-bit per channelPlinian divider using 4 lower bits per channel (high capacity)
example_lsb_msb_first.pngLSB MSB-first orderingPlinian divider with reversed bit extraction order per byte
example_bmp_dib.bmpBMP DIB header fieldsPlinian divider in reserved header bytes + trailing data
example_gif_disposal.gifGIF disposal methodPlinian divider in frame disposal flag bits
example_jpeg_app.jpgJPEG APP segmentPlinian divider in custom APP14 segment (ST3GG identifier)
example_ycbcr.pngYCbCr color spacePlinian divider in Cb chrominance channel LSB after RGB conversion
example_png_chunks_custom.pngPNG custom chunksPlinian divider in private stEg/sT3g ancillary PNG chunks

More Document & Archive Techniques (Plinian Divider)

FileTechniqueWhat's Hidden
example_pdf_javascript.pdfPDF JavaScriptPlinian divider base64 in OpenAction JavaScript
example_pdf_incremental.pdfPDF incremental updatePlinian divider in appended incremental update annotation
example_pdf_forms.pdfPDF form fieldsPlinian divider in hidden form field default values
example_html_events.htmlHTML event handlersPlinian divider in onclick, onload, onmouseover attributes
example_xml_entities.xmlXML entity declarationsPlinian divider in DOCTYPE entity definitions + per-byte entities
example_nested.zipNested ZIP archivePlinian divider in inner ZIP comment + secret.txt inside ZIP-in-ZIP
example_emoji_skin_tone.txtEmoji skin tone selectorsPlinian divider in skin tone modifier choice (4 tones = 2 bits)
example_punycode.txtPunycode/IDN domainsPlinian divider bytes encoded as internationalized domain names

Final Techniques (Plinian Divider)

FileTechniqueWhat's Hidden
example_jpeg_restart.jpgJPEG restart markers + COMPlinian divider in RST marker indices + COM comment segment
example_matched_pairs.pngMatched pairs LSBPlinian divider in pixel pair ordering (left>right=1, left<=right=0)
example_scanline_filter.pngPNG scanline filter abusePlinian divider in per-row filter byte choice (None=0, Sub=1)
example_qr_steg.txtQR code data encodingPlinian divider in QR data bit pattern + error correction analysis

Audio DSP Techniques (Plinian Divider)

FileTechniqueWhat's Hidden
example_echo_hiding.wavEcho hidingPlinian divider in echo delay patterns (short=0, long=1)
example_phase_coding.wavPhase codingPlinian divider in DFT phase of frequency bins per segment
example_spread_spectrum.wavSpread spectrum (DSSS)Plinian divider spread via PN sequence at low amplitude
example_quantization_noise.wavQuantization noisePlinian divider in 2nd LSB of 16-bit audio samples

Image DSP Techniques (Plinian Divider)

FileTechniqueWhat's Hidden
example_bpcs.pngBPCSPlinian divider in complex 8x8 bit-plane blocks (complexity segmentation)
example_dct_manual.pngDCT coefficientPlinian divider in mid-frequency DCT coefficients of 8x8 blocks
example_dft.pngDFT magnitudePlinian divider in Fourier transform magnitude spectrum
example_dwt_haar.pngDWT Haar waveletPlinian divider in HH high-frequency wavelet subband
example_subsampling.pngChroma subsamplingPlinian divider in 4:2:0 vs 4:4:4 chroma pattern per 2x2 block

Misc Techniques (Plinian Divider)

FileTechniqueWhat's Hidden
example_self_extracting.shSelf-extracting archivePlinian divider in base64 tar.gz payload embedded in shell script
example_xattr.txtExtended attributesPlinian divider in user.st3gg.payload xattr (+ b64, hex, flag)
example_tls_cert.pemTLS certificate fieldsPlinian divider in CN, SAN, extension fields of certificate structure

Regenerating Files

If you want to modify the hidden messages or create new samples:

python3 examples/generate_examples.py

Requires Python 3 with Pillow (pip install Pillow).