⚡ FastMCP Steganography Engine • Created by Knight_S

Ultra-Enriched Steganography & Forensics MCP Suite

Seamlessly arm Claude, Cursor, and AI agents with 70 specialized automated forensic tools across Images, Audio, Video, PCAP Covert Channels, Polyglots, and Text payloads.

Add this entry to your claude_desktop_config.json:

{
  "mcpServers": {
    "stegokiller": {
      "command": "python3",
      "args": ["/path/to/StegoKiller/server.py"],
      "env": { "PYTHONUNBUFFERED": "1" }
    }
  }
}

Connect directly to the live cloud SSE endpoint without installing dependencies:

{
  "mcpServers": {
    "stegokiller_cloud": {
      "url": "https://stegokiller.onrender.com/sse"
    }
  }
}

Install directly in 1-click via Smithery CLI:

npx -y @smithery/cli install @shaymimran26/stegokiller --client claude

Run the pre-built GHCR image without installing dependencies:

{
  "mcpServers": {
    "stegokiller": {
      "command": "docker",
      "args": [
        "run", "-i", "--rm",
        "-v", "/tmp/stego_mcp_output:/tmp/stego_mcp_output",
        "ghcr.io/shaymimran26-netizen/stegokiller:latest"
      ]
    }
  }
}

Install via Git and run directly:

git clone https://github.com/shaymimran26-netizen/StegoKiller.git
cd StegoKiller && chmod +x setup.sh && ./setup.sh
python3 server.py

70 Specialized Forensic Engines

Search by tool name, format, or steganography technique

analyze_alpha_channel Alpha Channel

Deep analysis of the Alpha (transparency) channel for hidden data - checks for non-255 alpha values, patterns, embedded binary data.

analyze_color_palette_stego Palette Stego

Detect palette-based steganography (EzStego, Cloak, PLTE chunk permutations) in indexed PNG and GIF images by analyzing palette sorting and index parity.

analyze_font_stego Font Stego

Inspect TrueType/OpenType font files (.ttf, .otf) for hidden cmap table mappings and custom font tables.

analyze_gif_apng_frames GIF/APNG

Deconstruct GIF and Animated PNG (APNG) frames, extract per-frame delay millisecond sequences (often used for ASCII flag covert encoding), and compute frame pixel differences.

analyze_jpeg_quantization_tables JPEG DQT

Extract JPEG Quantization Tables (DQT), Huffman Tables (DHT), and estimate original JPEG compression quality factor and double-compression artifacts.

analyze_png_chunks PNG Chunks

Parse ancillary PNG chunks (tEXt, zTXt, iTXt, pHYs, sRGB, private chunks), verify chunk CRCs, and identify hidden or non-standard chunk anomalies.

audio_channel_phase_diff Phase Diff

Invert stereo phase and compute channel subtraction (L - R) to isolate center/vocal or hidden audio.

audio_lsb_extract Audio LSB

Extract Least Significant Bits (LSB) directly from 16-bit or 8-bit uncompressed WAV PCM samples.

auto_decode_payload CyberChef

Automated Master Heuristic Pipeline: attempts Base64, Base32, Base85, Base91, Base58, Hex, URL-decoding, ROT13/Caesar shifts, Zlib decompression, and single-byte XOR brute-forcing.

auto_triage_challenge Triage

Autonomous 5-stage Master Pipeline: runs structure audit, flag regex grep, metadata dump, polyglot inspection, and binwalk signature scanning.

carve_foremost Foremost

Raw header/footer file carving using foremost.

carve_memory_dump_secrets RAM Carve

Scan memory core dumps (.dmp, .raw, .core, minidumps) for SSL/TLS master secrets, private RSA keys, environment variables, bash history, and CTF flags.

decode_audio_fsk_afsk FSK/AFSK

Demodulate Frequency Shift Keying (FSK / AFSK) telemetry audio signals (Bell 103, Bell 202, RTTY).

decode_audio_morse CW Morse

Extract and decode acoustic CW Morse code tones from an audio recording directly into plaintext.

decode_baudot_murray_code Baudot/ITA2

Decode 5-bit ITA2 Baudot/Murray teleprinter punch tape code with LTRS/FIGS shift registers.

decode_braille_steganography Braille Stego

Decode Unicode 6-dot and 8-dot Braille patterns (U+2800 to U+28FF) into English alphanumeric text.

decode_dna_steganography DNA Stego

Decode DNA nucleotide sequences (A, C, G, T) into binary and ASCII plaintext using standard base pairing (A=00, C=01, G=10, T=11) and Amino Acid Codon translation.

decode_dtmf_tones DTMF

Decode Dual-Tone Multi-Frequency (DTMF) dial tones in audio to recover keypad numbers.

decode_morse_in_whitespace Space Morse

Decode Morse code concealed within whitespace (Spaces=dot, Tabs=dash, Double Spaces=word boundary).

decode_spammimic SpamMimic

Decode SpamMimic spam-text steganography payloads using grammar-state extraction.

decode_sstv SSTV

Decode Slow-Scan TV (SSTV) audio transmissions (Robot, Martin, Scottie) directly into rendered image.

decode_zero_width_chars Zero-Width

Decode zero-width unicode characters (ZWSP, ZWNJ, ZWJ, BOM, WJ, and variation selectors).

descramble_audio_inversion Voice Invert

Descramble frequency-inverted voice audio (voice scrambler) by re-modulating against carrier frequency.

detect_covert_http_headers HTTP Headers

Inspect HTTP streams for covert exfiltration headers (X-Flag, custom authorization headers, Base64 cookies, and chunked transfer encoding trailing padding).

detect_homoglyphs Homoglyphs

Identify Cyrillic, Greek, or non-Latin lookalike Unicode characters interspersed in standard Latin text.

detect_jpeg_ghosts JPEG Ghosts

Analyze JPEG Double Compression & Ghosting artifacts across quality factor scans to detect spliced, forged, or hidden payload regions.

detect_network_tunneling Tunneling

Heuristic detector for DNS tunnels (dnscat2, iodine) and ICMP tunnels (ptunnel).

detect_polyglots Polyglot

Detect multi-format polyglot files (e.g. ZIP+JPEG, PDF+ZIP, GIF+JavaScript, HTML+PNG, RAR+JPEG).

detect_pvd_steganography PVD Stego

Detect Pixel Value Differencing (PVD) and edge-adaptive steganography in images by analyzing non-uniform histogram anomalies across smooth vs edge pixel neighborhoods.

detect_repeating_pixel_pattern Pattern Tile

Detect if an image is constructed from a repeating pixel tile pattern and extract the core tile payload.

extract_archive_metadata_covert Archive Meta

Extract covert steganography hidden in archive header timestamps, UID/GID modulation, and NTFS extra field extended attributes in ZIP and TAR containers.

extract_bitplanes Bitplanes

Extract and export all 8 bitplanes for R, G, B, and Alpha channels (32 images).

extract_deepsound DeepSound

Extract AES-encrypted hidden payloads from WAV/FLAC audio files created by DeepSound.

extract_lsb_payload LSB Extract

Extract LSB-embedded binary payload from an image with full control over channel selection, bit order, number of bits, and pixel traversal order. Returns raw bytes as hex and attempts ASCII/flag decoding.

extract_metadata Metadata

Extract deep EXIF/XMP/IPTC metadata, ICC profiles, and comments via ExifTool.

extract_pcap_covert_channels PCAP Covert

Carve ICMP payloads, DNS subdomain exfiltration, TCP SYN ISN leaks, IP ID/TTL modulation, and TLS SNIs.

fft_frequency_analysis 2D FFT

Perform 2D FFT frequency domain analysis on an image to reveal hidden patterns, watermarks, or embedded data in the frequency spectrum.

full_auto_solve Auto-Solve

ULTIMATE AUTOMATED CHALLENGE SOLVER. Runs EVERY applicable StegoKiller engine on the given file in intelligent order, automatically chains results, and extracts flags/payloads without any manual intervention. Stages:...

generate_audio_spectrogram Spectrogram

Generate high-resolution log/linear spectrogram from audio to uncover visual steganography, Morse code, or hidden spectral art.

grep_flag_patterns Strings

Search for flag patterns across ASCII, UTF-8, and UTF-16LE/BE strings.

image_math_combine Image Math

Combine two images using mathematical operations (XOR, subtract, add, difference, invert) to solve visual cryptography shares and differential steganography challenges.

inspect_ai_model_stego AI Model Stego

Forensics on PyTorch (.pt/.pth), SafeTensors (.safetensors), and ONNX (.onnx) models to detect trailing payloads, metadata injection, and tensor weight LSB tampering.

inspect_file_structure Structure

Check magic bytes against file extension, identify corrupt headers, calculate Shannon entropy across quadrants, and carve trailing overlay bytes.

inspect_git_stego Git Stego

Inspect a .git repository for hidden dangling commits, tree steganography, and orphaned blobs.

inspect_office_xml Office XML

Deconstruct DOCX/XLSX/PPTX structures for , white fonts, and hidden media.

inspect_ole_vba_macros OLE Macros

Forensic analysis of legacy OLE / Compound File Binary (CFB) documents (.doc, .xls, .ppt) for hidden VBA macro streams, AutoOpen triggers, and obfuscated shell commands.

inspect_pdf_layers_and_js PDF Layers/JS

Extract PDF Optional Content Groups (invisible layers / /OCG), /Launch actions, and embedded JavaScript streams concealing covert challenge payloads.

inspect_pdf_stego PDF Stego

Analyze PDF for hidden incremental update revisions, unreferenced stream objects, and /ActualText.

multi_tool_lsb_scan Parallel LSB

Run ALL available LSB extraction tools (zsteg, stegpy, openstego, stegolsb) in parallel and consolidate results with automatic flag detection.

png_filter_byte_analysis Filter Bytes

Extract and analyze PNG scanline filter bytes for hidden data encoded in filter type selections (0-4 per row).

reconstruct_visual_crypto_2x2 Visual Crypto

Reconstruct classic 2-out-of-2 visual cryptography binary shares (sub-pixel raster overlay).

recursive_archive_unpacker Archive Recurse

Recursively unpack nested archives (ZIP, 7z, TAR, GZ, BZ2, XZ, RAR) up to max_depth to solve 'Matryoshka doll' nested compression CTF challenges.

repair_and_read_qr QR Repair

Read, unmask, and repair corrupted QR codes (inverted polarity, damaged finder patterns).

run_cloaked_pixel CloakedPixel

Extract LSB steganography payload scattered using PRNG seed matrices via cloakedpixel.

run_f5_stego F5 Stego

Extract hidden data from JPEG files using the F5 matrix steganography algorithm.

run_jsteg Jsteg

Extract hidden data from quantized JPEG DCT coefficients using Jsteg.

run_mp3stego MP3Stego

Extract hidden payloads from MP3 layer-3 bit allocation tables using MP3Stego (Decode).

run_outguess OutGuess

Extract data hidden in redundant JPEG DCT bits using OutGuess.

run_steghide Steghide

Extract hidden steganography payload from JPEG, BMP, or WAV files using Steghide.

run_stegpy stegpy

Extract steganography payloads created via stegpy (PNG, BMP, WebP).

run_stegseek StegSeek

Ultra-fast multithreaded cracker for steghide passphrases on JPEG/BMP/WAV.

run_stegsnow SNOW Whitespace

Extract trailing whitespace and tab steganography using SNOW.

run_zsteg_analysis zsteg

Analyze PNG/BMP images with zsteg across all channels, bit orders, and pixel permutations.

scan_and_carve_binwalk Binwalk

Execute binwalk signature scan and optionally auto-carve embedded archives.

solve_bacon_cipher Bacon Cipher

Solve Bacon's cipher (supporting both 24-letter I=J/U=V and 26-letter complete alphabets). Handles A/B representations, case variations (Lower=A, Upper=B), and bold/italic markup.

solve_png_ihdr PNG Repair

Brute-force correct PNG dimensions (Height and Width) against IHDR CRC32 checksum to restore artificially cropped or truncated challenge images.

statistical_steganalysis Steganalysis

Perform Chi-Square (χ²) Analysis, Sample Pairs Analysis (SPA), and RS Steganalysis to detect LSB steganography and estimate embedded payload percentage.

steghide_dictionary_attack Dict Attack

Run a dictionary attack against steghide-embedded data using common CTF passwords or a custom wordlist.

stegseek_rockyou_crack StegSeek

Ultra-fast steghide passphrase cracker using stegseek with rockyou.txt or custom wordlist. Can test millions of passwords per second.

xor_bruteforce XOR Brute

Brute-force single-byte and multi-byte XOR keys on a file (up to max_key_len bytes). Automatically detects flags and printable text.

Ultra-Enriched Steganography & Forensics MCP Suite

Introducing full_auto_solve — One-Click Autonomous Solving

70 Specialized Forensic Engines

Introducing `full_auto_solve` — One-Click Autonomous Solving