Tactical digital forensics, CTF steganography solvers, penetration testing probes, and defensive security auditing. Audit EXIF GPS coordinates, recover cropped PNG IHDR dimensions, crack pixel XOR ciphers, and detect SVG XSS uploads without sending a single byte to external servers.
Lossless binary metadata & GPS cleaner
Inspect embedded GPS coordinates, camera serials, and timestamps. Losslessly prune tracking markers using selective presets with zero image recompression.
JPEG compression delta & forgery detector
Detect digitally spliced elements, airbrushing, and copy-move edits by magnifying the compression delta between original and re-quantized pixel blocks.
LSB channel decomposition & secret extractor
Deconstruct images into 8 distinct bit planes across R, G, B, and Alpha channels. Expose hidden watermarks and extract sequential LSB ASCII/UTF-8 strings.
Trailing byte extractor & polyglot finder
Identify file container EOF boundaries (FF D9 / IEND), detect appended ZIP/PDF/EXE archives, and carve hidden payloads into standalone downloadable files.
Lighting vectors & sensor noise analysis
Verify lighting consistency using 2D Sobel luminance vectors, detect edge splicing with Laplacian high-pass kernels, and surface sensor noise anomalies.
Cryptographic & perceptual hash pivots
Calculate SHA-256 and perceptual fingerprints (pHash/dHash). Launch 1-click investigative search queries across Google Lens, Yandex, Bing, and TinEye.
Auto-CRC32 height bruteforcer & stretcher
Auto-bruteforce the correct image height or width from stored IHDR CRC32 checksums. Solves CTF steganography challenges where flags are concealed by cropping dimensions.
A XOR B operations & 0x01-0xFF key scrubber
Execute bitwise XOR, absolute difference, and logic operations between two images to reveal hidden watermarks. Includes a live single-image 0x01–0xFF XOR key scrubber.
Deep container heuristics & header recovery
Diagnose and restore zeroed or corrupted magic bytes across JPEG, PNG, GIF, WebP, and PDF containers. Inspect side-by-side hex comparisons and patch files in 1 click.
Web shell detector & pentest canary generator
Scan image uploads for embedded PHP/ASP web shells, SVG XSS script vectors, and polyglots. Generate safe, benign canary probes for authorized security penetration testing.
Image DoS detector & RAM footprint calculator
Inspect dimensions from container headers without decoding pixels. Calculate uncompressed RAM footprints and generate production hardening policies for Sharp and ImageMagick.
Otsu binarization, inversion & quishing audit
Restore unreadable, low-contrast, or inverted white-on-black QR codes using adaptive Otsu binarization and morphological scratch repair. Analyze quishing redirect risks.
HEIC/WebP/PNG/JPG & <200KB compression
Batch convert HEIC, WebP, PNG, and JPG images in-memory with custom dimension scaling, quality tuning, and iterative binary search to compress strictly under 200KB for visa and job portals.
Audit & purge Info dictionaries & XMP streams
Scan PDF documents for hidden Author, Creator, and Producer properties. Purge embedded XML XMP metadata packets and private PieceInfo data 100% client-side with zero server uploads.
Strip UTM, fbclid & de-bloat Amazon links
Remove advertising telemetry, cross-site click tokens (fbclid, gclid, utm_*), and affiliate cookies from shared links. Normalizes Amazon URLs to shortest canonical /dp/ASIN form.
Audit & wipe metadata from DOCX/XLSX/PPTX
Inspect internal docProps OpenXML manifests for author names, workstation hostnames, total editing duration, and network template paths. Sanitizes files in-memory using JSZip.
Audit WebRTC IP leaks, Canvas hash & GPU
Inspect what tracking networks determine about your device. Tests for WebRTC local/public IP leaks, unmasked WebGL GPU model, Canvas 2D SHA-256 hash, and provides hardening guidance.
Uploading sensitive evidence or target payloads to cloud servers breaks the investigative chain of custody and leaks unredacted target data. OverlayCheck processes all images directly in browser heap memory using TypedArrays and HTML5 Canvas.
Image buffers exist only during active browser execution and are cleared upon page reload or tab closure.
Zero network upload delays. Run complex quantization changes and bit-plane slicing in real time.
Inspect your browser developer tools network tab: zero outgoing image POST or multipart upload requests.
Step-by-step guide to recovering flags hidden by dimension cropping and auto-bruteforcing original IHDR heights.
How security testers evaluate media filters, detect SVG XSS vectors, and prevent web shell execution.
How tiny 50KB images exhaust 6+ GB of server RAM, and how to harden ImageMagick and Sharp.