Forensik

Laden Sie ein Bild hoch, um potenziell versteckte Daten mittels LSB-Steganographie-Analyse (Least Significant Bit) zu erkennen. Analysiert Modifikationen auf Pixelebene, zeigt eine Heatmap veränderter Pixel, erkennt statistische Anomalien und extrahiert versteckte Textnachrichten, falls vorhanden. Kompatibel mit Standard-LSB-Kodierung und dem STEG-Header-Format. Die gesamte Verarbeitung erfolgt lokal in Ihrem Browser - Kostenloser Online-Steganographie-Detektor, keine Anmeldung.

Laden Sie ein Bild hoch und sehen Sie eine detaillierte binäre Aufschlüsselung, was zu seiner Dateigröße beiträgt - Pixeldaten, Komprimierungs-Overhead, Metadaten (EXIF/IPTC/XMP), Farbprofile (ICC) und strukturelle Header. Erhalten Sie priorisierte Optimierungstipps mit geschätzten Einsparungen für Web-Performance, mobile Apps und Speicherverbrauch. Unterstützt JPEG, PNG, GIF, WebP, BMP, TIFF, AVIF und HEIC - alles läuft lokal in Ihrem Browser, kein Server-Upload. Kostenloser Online-Bilddateigrößen-Analyse.

Laden Sie eine Datei hoch, um sofort ihren wahren Dateityp durch Lesen der Magic Bytes (Dateisignatur/Header) zu erkennen. Das Tool umgeht falsche Dateierweiterungen und zeigt das echte Format. Zeigt Hexdump mit hervorgehobenen Signatur-Bytes, ASCII-Interpretation, MIME-Typ, Dateikategorie und Erweiterungs-Match-Analyse. Unterstützt über 120 Dateisignaturen in 16 Kategorien: Bilder, Audio, Video, Dokumente, Archive, ausführbare Dateien, Schriften, Zertifikate, Disk-Images und mehr. Alles läuft lokal in Ihrem Browser - Kostenloser Online-Datei-Magic-Byte-Detektor, keine Anmeldung.

Erkennen Sie Copy-Move-Fälschungen in Bildern per Pixelblock-Matching. Laden Sie ein Bild hoch, um geklonte/kopierte Bereiche zu finden, Heatmap-Overlays mit Ort und Intensität der Klone zu sehen und Konfidenzwerte mit Bereichsdetails zu erhalten. Drei Empfindlichkeitsstufen für verschiedene Erkennungsbedürfnisse. 100 % private Browser-Verarbeitung - Kostenloser Online-Bild-Klone-Detektor.

Extrahieren Sie Copyright- und Metadaten-Informationen aus Bildern. Laden Sie ein Bild hoch, um eingebettete EXIF-Copyright-Tags (Artist, Copyright, ImageDescription), IPTC-Felder (CopyrightNotice, ByLine, Credit, Source, UsageTerms, Contact) und PNG-Text-Chunks zu lesen. Erhalten Sie einen Copyright-Vollständigkeits-Score, eine Rechte-Statusklassifikation und einen detaillierten Bericht aller erkannten Felder - Kostenloser Online-Bild-Copyright-Prüfer.

Erkennen Sie die Farbtiefe eines beliebigen Bildes - 1-Bit, 8-Bit, 24-Bit, 32-Bit, 48-Bit und mehr. Laden Sie ein Bild hoch, um Pixeldaten zu analysieren, Bits pro Kanal zu erkennen, den Farbraum zu identifizieren, eingebettete ICC-Profile zu prüfen und einen detaillierten technischen Bericht zu erhalten. Alles passiert lokal in Ihrem Browser - Kostenloser Online-Bild-Farbtiefen-Prüfer, keine Anmeldung.

Analyze noise patterns in images to check whether they were shot at high ISO, heavily processed, or carry synthetic-looking noise (a hint, not proof, of AI generation). See per-channel noise levels, noise histograms and a false-color heatmap.

Scan any file for embedded content - images, documents, archives, audio, video, executables, and fonts hidden inside. Upload any file and instantly detect 40+ file formats using binary signature (magic byte) analysis. Get results organized by category with exact byte offsets, size estimates, confidence indicators.

Extract and analyze embedded timestamps from photos - Date Taken, Date Digitized, and Date Modified. Upload any image to read EXIF timestamp metadata, detect chronological anomalies (future dates, out-of-order timestamps, identical dates), and identify software editing traces. All processing is local in your browser.

Check if a file extension matches its actual content type using magic bytes (file signature) detection. Upload any file to read the first bytes, match against 60+ known file signatures, and instantly determine if the file is what it claims to be. Detects disguised files commonly used in phishing attacks - all.

Generate MD5 and SHA256 SSH key fingerprints from SSH public keys. Paste your SSH public key in OpenSSH or PEM format to instantly get its MD5 (colon-separated hex) and SHA256 (Base64) fingerprints. Supports RSA, ECDSA, Ed25519, and DSA key types with automatic key type and key length detection. Handles multi-key.

Identify container file formats (ZIP, RAR, 7z, ISO, OLE, Ogg, MKV, PDF) and list their contents without extracting. Upload any file to detect its container format by magic bytes, list internal file names and sizes for ZIP-based formats (including DOCX, XLSX, PPTX, JAR, APK, EPUB), extract PDF metadata and page count.

Upload multiple files to detect their true file types by reading magic bytes (file signatures). Supports 65+ formats including images, documents, archives, audio, video, fonts, and executables. Highlights extension mismatches for security audits and forensic analysis -

Upload any binary file and search for specific byte patterns using hex notation (FF D8 FF, with ?? wildcards), text strings, or regular expressions. Scans every byte to find all occurrences with exact offset, hex/ASCII representation, and surrounding context. Configurable context size, case sensitivity, and max.

Upload any file to read and interpret its footer/trailer bytes - the closing signatures that mark the end of a file format. Complementary to magic bytes (headers), trailers are essential for understanding file structure boundaries, detecting truncated files, verifying file completeness, and forensic analysis.

Upload any file to check if it has been truncated (cut short) - detects incomplete downloads, failed exports, and corrupted transfers by analyzing file headers and comparing expected end-of-file markers with actual file size. Supports JPEG (EOI FF D9 marker), PNG (IEND chunk with dimension-based estimation), GIF.

Upload Office documents (DOCX, XLSX, PPTX) to detect hidden content including hidden worksheets, hidden slides, hidden text, tracked changes, comments, VBA macros, and hidden rows or columns. Each finding is categorized with risk levels - all processing is local in your browser.

Analyze chunk-based file formats (PNG, RIFF/WAV/AVI/WebP, JPEG, GIF) and list all chunks with type, size, offset, CRC-32 checksums, and parsed field-level data. All processing is local in your browser - free online File Chunk Analyzer, no signup required.

Upload any file to view and interpret its binary header bytes. Shows hex dump, ASCII interpretation, and a field-by-field breakdown with plain-English explanations for PNG, JPEG, PDF, ZIP, GIF, BMP, ELF, and other formats. Displays offset, length, hex value, and interpreted values for each header field.

Upload any archive file (ZIP, RAR, 7z, TAR, GZ, BZ2, XZ) for detailed structural analysis. Shows compression methods, encryption type (AES-256, PKWARE), file count, total compressed/uncompressed sizes, compression ratio, file type distribution, and per-file details for ZIP archives.

Upload any file to detect and analyze padding bytes - extra bytes added for alignment, header filling, or sector padding. Finds runs of identical bytes, classifies by type (null, space, 0xFF, debug values), shows distribution map, and calculates padding percentage.

Upload any file to check if it is password-protected or encrypted. Instantly detects encryption on PDFs (/Encrypt flag, AES-256 vs RC4), Office documents (DOCX/XLSX/PPTX with EncryptionInfo), ZIP archives (PKWARE encryption flags), and RAR archives (encryption headers). Shows the encryption type, algorithm strength.

Upload any file to scan for suspicious patterns commonly used in malware: double extension masquerading (document.pdf.exe), Unicode bidirectional override characters (U+202E RTL override that disguise file types), zero-width invisible characters, high-entropy encrypted/packed payloads, and hidden data appended after.

Extract all embedded images from Office documents and PDFs. Upload Word (.docx), Excel (.xlsx), PowerPoint (.pptx), or PDF files to extract images stored in media folders and PDF object streams. View a gallery with preview thumbnails, dimensions, formats, and sizes. Download individual images or all images as a ZIP.

Upload a .docx, .xlsx, or .pptx file to extract all embedded metadata - author, created/modified dates, company, revision history, comments, hidden text, custom properties, font lists, and more. Parses the Open XML structure to read core properties (dc, dcterms), document statistics, application settings.

Upload two Office documents (DOCX, XLSX, PPTX) to compare their metadata side by side. Extracts and compares all embedded metadata - author information, creation and modification dates, revision history, document statistics, company details, application version, and custom properties. Each field is categorized.

Upload any PDF to extract all embedded metadata - author, title, subject, keywords, creator, producer, creation/modification dates, and PDF version. Extracts both the Document Info Dictionary and XMP metadata (Dublin Core, Adobe XMP). Fields organized by source group with per-field descriptions, tab-based filtering.

Upload any file to simulate file carving - recovery of embedded files by scanning for known headers (magic bytes) and footers (trailer signatures). Detects 13 file formats including JPEG, PNG, GIF, BMP, PDF, ZIP, RAR, GZIP, ELF, MP3, RIFF, OLE2, and SQLite. Shows each carved fragment with exact byte offset, estimated.

Upload any file to check if its size is unusual compared to typical files of the same type. Detects suspiciously small or large files that may indicate corruption, tampering, hidden embedded content, or padding added by malware. Uses magic bytes to detect the true file format even if the extension has been changed.

Upload a damaged file to detect its file type from remaining data and suggest a correct header to prepend for recovery. Analyzes magic bytes at various offsets, entropy patterns, and byte frequency distributions to identify the original format even when the header is corrupted or missing. Supports JPEG, PNG, GIF.

Upload any binary file (executables, firmware, disk images, ROMs) to extract all embedded printable strings - URLs, file paths, identifiers, code snippets, and readable text. Configurable minimum length from 2-20 characters, ASCII and Unicode support, smart categorization (URLs, Paths, IDs, Code, Data, Text)

Upload any file fragment (a piece of a file without its header) to identify its likely file type using statistical byte pattern analysis. Computes a comprehensive byte profile including Shannon entropy, byte frequency distribution, printable ASCII percentage, zero-byte density, and internal marker detection.

Upload Office documents (DOCX, XLSX, PPTX) or PDF files to extract all embedded URLs. Parses the internal document structure to find every external link - hyperlinks, href attributes, and bare URLs in text. Shows each URL with its location within the document, a context snippet, protocol (HTTPS/HTTP), and extracted.

Upload Office documents (DOCX, XLSX, PPTX) or PDF files to scan for embedded URLs. Extracts all external links and checks them against a comprehensive local database of 40+ phishing indicators - suspicious TLDs, lookalike domains, credential harvesting keywords, URL obfuscation, protocol anomalies, IP address URLs.

Upload any compressed or archived file to instantly identify which compression algorithm was used - DEFLATE (zlib/gzip), LZMA/XZ, BZIP2, Zstandard (ZSTD), Brotli, LZ4, Snappy, LZW, RLE, Huffman Coding, and more. Reads binary header bytes and matches against a database of 30+ compression-specific signatures.

Check if a signed file's digital certificate is valid. Paste PEM-encoded certificates, PKCS7 signed data, or upload a signed file (.cer, .crt, .p7b, .exe, .dll) to extract full X.509 certificate details - subject and issuer, validity dates, serial number, SHA-1/SHA-256 thumbprints, key usage, extended key usage.

Upload any file to calculate a comprehensive security risk score (0-100) based on file type, embedded content, macros, scripts, URL links, entropy, metadata anomalies, and extension mismatches. Each risk factor is analyzed independently and weighted to produce a final severity rating.

Upload any file to scan for personally identifiable information (PII) that could reveal file origin - detects email addresses, phone numbers, GPS coordinates, IP addresses, computer names, file paths (Windows/Unix), usernames, SSNs, URLs with credentials, and document metadata (author, company). Each finding.

Upload any file to validate its internal structure - checks headers, markers, chunks, CRC checksums, and structural integrity for JPEG, PNG, PDF, ZIP, MP3, and MP4 formats. Each format-specific check reports field-level issues with exact byte offset, severity rating, and actionable recovery recommendations.

Upload multiple files at once to check which ones are zero bytes (empty files with 0 size). Detects completely empty files, files containing only whitespace or null bytes (effectively empty), and provides batch statistics. Shows a clean results table with file name, size, type icon, detection status, and individual.

Upload any file to detect embedded JavaScript code across PDFs, Office documents (DOCX, XLSX, PPTX), HTML, SVG, XML, and any file format. Detects PDF /JavaScript references and /OpenAction auto-execute triggers, Office VBA macros and script elements in XML, HTML/SVG inline scripts and event handlers.

Upload two directory listings (as text or from archives) to compare their file structure side by side. Parses directory listings and archive contents to detect files added, removed, changed, and unchanged between the two input sets. Results are organized into clearly categorized tables with file sizes, status badges.

Upload any file to estimate whether deleted data might still be recoverable. Analyzes file slack space, overwrite patterns, byte frequency distributions (vs known pristine patterns), embedded remnant detection (old strings, paths, residues), and sector-level analysis. Provides an overall recovery potential score.

Upload multiple files to compare their sizes with a visual bar chart. Instantly identify the largest and smallest files in a set. Shows total size, average size, median size, and size distribution. Sort by name or size. All processing runs locally in your browser - free online File Size Comparator, no signup required.

Upload a before/after set of files to detect all changes: added files, removed files, modified files, and unchanged files. Compares filenames and SHA-256 content hashes for accurate modification detection. Results include a visual summary dashboard with counts, size totals, bar chart overview, and detailed per-file.

Find files that are similar but not identical using fuzzy hashing (ssdeep-like algorithm). Upload multiple files to compare them with content-based chunking and rolling hash analysis. Get similarity scores from 0% to 100% organized by category - Identical, Near-Duplicate, Similar, Somewhat Similar, and Different.

Upload multiple files to see a breakdown of file types in the set. Interactive pie chart visualization of categories, MIME types, and extensions with magic byte detection. Identifies 80+ file formats across images, documents, archives, audio, video, executables, fonts, and certificates. Per-file details.

Compare two versions of the same file to see what changed - file name, size, extension, last modified date, and SHA-256 content hash. Upload any two files for instant side-by-side comparison with clear match/difference indicators for each attribute. The tool computes a cryptographic hash using the Web Crypto API.

Upload multiple files to detect naming patterns including sequential numbering, date patterns, common prefixes, suffixes, consistent separators, and file extension distributions. Each pattern is scored with a confidence rating (0-100%). View detected patterns, file groups by common naming elements, and suggested.

Upload any file to view all its file system attributes - file name, size, MIME type, timestamps, permissions, magic bytes, content classification, character encoding, and Shannon entropy. Displays basic attributes (name, size, type, extension), temporal data (last modified timestamp), format detection via magic bytes.

Upload any file to verify that its magic bytes match its extension and check for header-level corruption. Deep header validation for JPEG, PNG, PDF, ZIP, EXE, ELF, and more. Supports 120+ file signatures across 16 categories. Quick integrity triage tool - all processing is local in your browser, no signup required.

Upload a completely unknown file (no extension or unrecognized format) and instantly identify its true file type by reading the magic bytes. Shows the likely file format, MIME type, common applications that use it, typical use cases, and extension suggestions. Supports 200+ file signatures across images, audio.

Free online Document Metadata Remover. Upload DOCX, XLSX, or PPTX files to instantly strip all personal metadata - author name, last modified by, company, revision history, creation/modification dates, and more. Removes metadata from document properties (docProps/core.xml and docProps/app.xml), comments, and revision.

Free File Extension Lookup online. Search any file extension (.pdf, .jpg, .docx, .zip) to see its full format name, MIME type, magic bytes, associated programs, and typical usage. Browse by category - images, documents, audio, video, archives, and more. No signup required.