StegSolve Online
Full StegSolve.jar in your browser. 28 bit planes, auto-scan, chi-square LSB detection, brute-force extractor, PNG chunk analysis, stereogram solver. No Java, no install.
How to Analyse a Steganographic Image (5 steps)
- Upload your image (PNG, BMP, JPEG, GIF, WebP, TIFF, or AVIF) — files never leave your browser
- Quick Scan runs automatically: chi-square LSB test, QR detection, PNG chunk parsing
- Open the Analysis Workspace and browse 28 bit planes across R/G/B/A channels
- Use the Extract tab to pull raw bits using any combination of channels and byte order
- Switch to Forensics mode and run Brute-Force to test all 255 channel combos automatically
StegSolve Online — Analysis Methods
| Method | Technique | Format | Best For |
|---|---|---|---|
| Bit Plane Viewer | R/G/B/A channels × 8 bits = 28 planes | PNG, BMP, TIFF | Essential — start here |
| Auto-Scan | Chi-square + QR + PNG tEXt/zTXt parsing | PNG primarily | Fastest flag finder |
| Data Extraction | Any bit-combo · Row/Col · MSB/LSB order | All lossless | StegSolve-compatible |
| Image Combiner | XOR / AND / OR / ADD / SUB between two images | All formats | Two-image CTF challenges |
| Brute-Force | 255 combos ranked by readability score | All lossless | Forensics mode — last resort |
| Stereogram Solver | Horizontal offset reveal for SIRDS images | PNG, BMP | Stereogram CTF challenges |
Frequently Asked Questions
What is StegSolve and why is there an online version?
StegSolve is a popular Java-based tool for analysing steganographic images in CTF competitions. The original .jar requires a Java runtime and does not run on Chromebooks, many Linux distros, or modern Macs. StegSolve Online runs fully in your browser — no Java, no install, no file upload.
Is this byte-identical to StegSolve.jar?
The core bit-plane viewer, data extractor, and image combiner match StegSolve.jar byte-for-byte. This version adds 34 enhancements: auto-scan, chi-square detection, QR code recognition, PNG tEXt/zTXt chunk parsing, stereogram solver, brute-force combinator, and a session log.
Does my image get uploaded to a server?
No. All processing happens in your browser using the Canvas API. Your file never leaves your device.
Which file formats are supported?
PNG, BMP, JPEG, GIF (animated — all frames extracted), WebP, TIFF, and AVIF. For CTF challenges use PNG or BMP — lossless formats where steganographic data survives intact.
What does the Brute-Force tab do?
Tests all 255 bit-channel combinations (R0, G0, B0, G1+B1 etc.) across 4 byte orders and ranks results by readability score. Results above 90% are almost certainly embedded data. Only available in Forensics mode.
What is the chi-square test?
Chi-square analysis detects LSB steganography by measuring whether adjacent pixel value pairs appear with statistically equal frequency — a hallmark of sequential LSB embedding. A chi-square score above ~0.7 is suspicious.