> For the complete documentation index, see [llms.txt](https://sarpers-organization.gitbook.io/ctftricks/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://sarpers-organization.gitbook.io/ctftricks/_chapter-intro-6/steganography/data-extraction/trick-0210.md).

# Extract Credentials from Image Metadata (Exiftool + Base64)

***

Use `exiftool`, a platform-independent command-line application, to extract metadata from an image file.

The basic command to extract all metadata is:

```bash
exiftool <image_file>
```

For a more comprehensive output that includes unknown tags and organizes the information by group name, you can use options like `-a`, `-u`, and `-g1`:

```bash
exiftool -a -u -g1 <image_file>
```

The `-a` option extracts all meta information, including duplicates and unknown tags. The `-u` option specifically extracts unknown tags in addition to known tags. The `-g1` option organizes the output by group 1 name.

Examine the output carefully for unusual strings or data, which might be hidden information or encoded secrets. Techniques like steganography can be used to hide secret messages in images by embedding them within metadata fields. Hidden credentials or data are often found in fields like 'Image Description'.

If you find a suspicious string that appears to be encoded (e.g., Base64), pipe it to `base64 -d` to decode it.

```bash
echo "<Base64_String>" | base64 -d
```

For instance, a Base64 encoded password might be hidden within the 'Image Description' field. ExifTool Command-Line Examples cover tasks like Read Metadata.