Tools / Stegall
Drop any file (image, audio, archive, document, capture, disk image) and Stegall runs every applicable steg technique in parallel, recursively unpacks whatever falls out, runs each text output through layered decoder cascades, and surfaces any flag matches at the top.
Flag patterns
0/32
Built in: picoCTF{...}, flag{...}, CTF{...}, HTB{...}, PCTF{...}. Add prefixes for other CTFs (e.g. THM, HV); each gets matched as PREFIX{...}.
After a run finishes, a final pass also flags anything case-insensitively matching [letters]CTF[letters]{...} so prefixes like ksaCTF, CTFsoa, or plain ctf get caught even if you didn’t register them above.
OSINT context
0/65536
Paste anything you found outside the file: a caption from reverse image search, the hint page, a tweet, a song lyric.
Notify when done
Big files can take minutes. Get a desktop notification when the run finishes so you can switch tabs in the meantime.
Intensive mode
Each technique gets a 30-second budget by default - long enough for any honest analyzer on a normal CTF artifact, but it caps the pathological cases. Flip this on to extend that to 180 seconds when an artifact resists the default sweep.
Drop a challenge file here, or click to pick one
PNG, JPG, BMP, GIF, WAV, ZIP, DOCX, PPTX, gzip, text. Files never leave your browser.
Drop two images at once to run the pair-image pipeline (XOR / LSB diff / subtract).
Ordered by how often the flag actually lives there. Metadata first, pixel analysis second, encoded text last.
Applied to every text output and to raw bytes, up to 6 layers deep:
Stegall runs entirely in your browser. Files never leave your machine. The engine uses the Canvas, Web Audio, and DecompressionStream APIs to do most of what a server-side steg toolkit would, then runs every text output through a 6-layer decoder cascade and scans every byte at every layer for flag patterns.
The image LSB sweep (~600 extractions per image counting all channel orderings, bit packings, and pixel-walk directions) fans out across a Web Worker pool sized to your CPU’s logical cores, so the UI stays responsive even on multi-megapixel inputs.