Unable to Reach Last Password in `rockyou.txt` Using Stegseek

[mercurialus]

Description

While using stegseek to brute-force a JPG file protected with a password from the rockyou.txt wordlist, I encountered a problem where the scan never reaches the last few entries in the list.
I manually set the password as *7¡Vamos! (which is towards the end of rockyou.txt), but stegseek halts at around 99.73% and never discovers the password.

As a result, bruteforcing fails, even though the correct password exists in the wordlist.

Steps to Reproduce

1. Use steghide to embed a file in a .jpg image with the password *7¡Vamos!

   steghide embed -cf input.jpg -ef secret.txt -p '*7¡Vamos!'
   

2. Attempt to extract using stegseek with the full rockyou.txt wordlist:

   stegseek input.jpg rockyou.txt

Expected Behavior

stegseek should reach 100% of the wordlist and find the password if it exists, including the final entries like *7¡Vamos!.

Observed Behavior

stegseek stops before 100% and does not reach the password at the end of the list.

Environment

• OS: Debian
• stegseek version: 0.6

Additional Notes

• I have verified that the password exists in rockyou.txt.
  • It’s consistently stopping before it actually reaches 100%, suggesting a potential issue in how the wordlist is read or processed.

[RickdeJager]

I remember running into this when I did my initial benchmarks. The issue is that the last few items in rockyou.txt contain special characters. For example, here's what they look like in VIM and xxd:

tail -n 1 rockyou.txt | xxd
00000000: 042a 0337 c2a1 5661 6d6f 7321 030a       .*.7..Vamos!..

Stegseek halting at %99.xx is just a display issue, there shouldn't be any edge cases where the last few elements of the wordlist are not parsed. But if you have a repro case please let me know.