🔧 File Header Repair / Editor
View, compare, and fix corrupted file headers (magic bytes)
Current Header (first 32 bytes)
Auto-Detect & Fix
Magic Bytes Reference
| Type | Magic Bytes | ASCII |
|---|
📐 PNG Dimension Bruteforcer
Fix modified PNG width/height by CRC bruteforce
Current IHDR
Bruteforce
📋 File Metadata Viewer
EXIF, PNG chunks, GIF/BMP info — works on all file types
Metadata
🔍 Binwalk Scanner
Scan for embedded files by magic bytes signatures
Scan Results
📝 Strings Extractor
Extract readable strings from binary data
💾 Hex Viewer
View raw hex and ASCII data
🧬 File Signature Analyzer
Detect true file type, check header/footer integrity
📦 PNG Chunk Analyzer
Parse all PNG chunks, validate CRCs, find hidden text
📷 JPEG Structure Analyzer
Parse JPEG markers, find hidden comments & trailing data
🎨 Image Enhancement
Adjust brightness, contrast, gamma — reveal hidden visual data
🔴 Color Channel Separator
View R, G, B, Alpha channels individually
🔬 LSB Steganography
Extract hidden data from least significant bits
🔍 zsteg Auto Scanner
Automatically scan ALL bit plane + channel + pixel
order combinations (like zsteg -a)
⚡ Error Level Analysis
Detect tampered/edited regions by re-compression analysis
#️⃣ Hash Calculator
MD5, SHA-1, SHA-256, SHA-512
📊 Entropy Analyzer & Cheat Sheet
Shannon entropy + forensic command reference
Entropy Analysis
Forensic Cheat Sheet
| Task | Command |
|---|---|
| File type | Linuxfile suspicious_file |
| EXIF data | Linuxexiftool image.jpg |
| All EXIF | Linuxexiftool -a -u -g1 image.jpg |
| Strings | Linuxstrings -n 6 file | grep -iE "flag|ctf|key" |
| Hex dump | Linuxxxd file | head -50 |
| Binwalk scan | Linuxbinwalk file |
| Binwalk extract | Linuxbinwalk -e file |
| Foremost | Linuxforemost -i file -o output/ |
| Steghide extract | Linuxsteghide extract -sf image.jpg -p "" |
| zsteg (PNG) | Linuxzsteg -a image.png |
| zsteg all | Linuxzsteg image.png --all |
| PNG fix height | Linuxpngcheck -v image.png |
| Fix PNG CRC | Anypython3 -c "import struct,zlib; ..." |
| Volatility info | Anyvolatility -f dump imageinfo |
| Process list | Anyvolatility -f dump --profile=X pslist |
| Network scan | Anyvolatility -f dump --profile=X netscan |
| File scan | Anyvolatility -f dump --profile=X filescan |
| GIMP check | GUIColors → Curves → drag to see hidden |
| Stegsolve | Anyjava -jar Stegsolve.jar |
🔓 Quick Decoder
Decode Base64, Hex, ROT13, URL, Binary, Octal, Reverse — also runs in Auto Find Flag