METROPOLITAN STATE UNIVERSITY

CFS 280 INTRODUCTION TO COMPUTER FORENSICS SPRING 2013 LAB 2 - STEGANOGRAPHY & MD5 HASHING LAB
DUE FEBRUARY 7, 2013
(10 POINTS)

In this lab assignment we will experiment with some steganography tools and an MD5/SHA hashing utility. 1. Download the S-Tools zip file from the Content page under Resources on the course site. After downloading, extract the files and install s-tools. 2. Download the MD5 Extractor zip file from the Content page under Resources on the course site. After downloading, extract the files and install MD5 Extractor. 3. Download the files zebras and original-zebras from the Content page under Resources on the course site. 4. Run the MD5 Extractor program on each of the zebra files. What is the MD5 hash value for zebras? ______________________ What is the SHA-1 hash value for zebras? _____________________ What is the MD5 hash value for original-zebras? _______________ What is the SHA-1 hash value for original-zebras? ______________ Can you see any difference between the two photographs? ________ 5. Start s-tools and drag the zebras file to the s-tools window and drop it there. With the mouse cursor over the picture in s-tools, right click. Select reveal from the menu and enter the abc (without the quotation marks) as the pass phrase and verification. Click OK and wait a moment. What happens? _____________________________________________________________ 6. Right click one of the files that appear and save it to the Desktop. Open it with Notepad. What is it? ___________________________________________________ Do the same for the other files. What are they? ______________________ _____________________________________________________________

7.

Repeat steps 5 and 6 using the file original-zebras. What happens?

_____________________________________________________________ 8. Create a small text file using Notepad with any contents you like.

9. Make a copy of original-zebras and drag the copy into the s-tools window. 10. Drag your small text file into the s-tools window and drop it on the copy of the original-zebras file already there. What happens? ________________________________________________ Enter a pass phrase, verify it and click OK. What happens? _____________________________________________________________ 11. Right click the zebra picture with your text hidden in it and click Save as to save it to the Desktop. Run the MD5 Extractor program on it. What are the MD5 and SHA-1 hash values? _____________________ ________________________________________________________ Are the same or different from the original-zebras values? ________ 12. Create and save a text file with the following text in it: The quick brown fox jumped over the lazy dog. 13. Create and save another text file with the identical text in it, but this time leave off the period at the end of the sentence. 14. Using the MD5 Extractor program, find the MD5 and SHA-1 hash values for each file. Are they the same? ____________________________ 15. Create and save another text file identical to the first one you created (including the period at the end of the sentence), but give it a different file name. 16. Using the MD5 Extractor program, find the MD5 and SHA-1 hash values for each file. Are they the same? ____________________________

17. Write a couple of paragraphs summarizing what you learned from this exercise. What to hand in Upload your answers to the questions noted above to the dropbox for Lab 2 - Steganography-Hashing Lab.