Image forensic

Forensic

Images contained tons of information also known as metadata. This site extracts these information from provided images and display them in a nicely formatted report. Both passive analysis like metadata extraction and active analysis like ELA (Error Level Analysis) are performed.

Metadata analysis

Image metadata extraction and classification. For example: EXIF, IPTC, XMP.

Signatures

A ruleset of signatures to extract important evidence data, with different importance levels and category of extracted data.

Free

The service is free of charge, no hidden costs or advertisement.

Privacy

You can mark an analysis as private before submitting. Upon submission, the report is accessible only with knowledge of its direct link; so you can share the analysis results with your peers and keep it hidden from unwanted eyes.

Disclosure agreement

This site does not disclose, share, commercialize or make any profit with the analyzed results.

Despite numerous tools exist to perform forensics investigations on images, they lack features and are generally buggy. This site is meant to address these issues and offer a stable and reliable service for forensics investigators and security professionals.

So this application borns, it was designed with the following goals:

Forensic techniques all-in-one

Deliver the main image forensics techniques in one application.

Privacy

Option to keep analysis private. The report is accessible only with knowledge of its direct link.

Free

Give out the application free for all, without advertisements.

Non disclosure

Keep analysis data strictly private. No data sharing, no analysis sharing.

Technical features

• Supported image types
  • Windows bitmap .bmp
  • Raw Canon .cr2
  • Raw Canon .crw
  • Encapsulated PostScript .eps
  • Graphics Interchange Format .gif
  • JPEG File Interchange Format .jpg or .jpeg
  • Raw Minolta .mrw
  • Raw Olympus .orf
  • Portable Network Graphics .png
  • Raw Photoshop .psd
  • Raw Fujifilm .raf
  • Raw Panasonic .rw2
  • Raw TARGA .tga
  • Tagged Image File Format .tiff
• EXIF metadata extraction
  • Standard Exif tags
  • Canon MakerNote tags
  • Fujifilm MakerNote tags
  • Minolta MakerNote tags
  • Nikon MakerNote tags
  • Olympus MakerNote tags
  • Panasonic MakerNote tags
  • Pentax MakerNote tags
  • Samsung MakerNote tags
  • Sigma/Foveon MakerNote tags
  • Sony MakerNote tags

• IPTC metadata extraction
  • IPTC datasets
• XMP metadata extraction
  • Dublin Core schema (dc)
  • XMP Basic schema (xmp)
  • XMP Rights Management schema (xmpRights)
  • XMP Media Management schema (xmpMM)
  • XMP Basic Job Ticket schema (xmpBJ)
  • XMP Paged-Text schema (xmpTPg)
  • XMP Dynamic Media schema (xmpDM)
  • Adobe PDF schema (pdf)
  • Photoshop schema (photoshop)
  • Camera Raw schema (crs)
  • Exif schema for TIFF Properties (tiff)
  • Exif schema for Exif-specific Properties (exif)
  • Exif schema for Additional Exif Properties (aux)
  • IPTC Core schema (Iptc4xmpCore)
  • IPTC Extension schema (Iptc4xmpExt)
  • PLUS License Data Format schema (plus)
  • digiKam Photo Management schema (digiKam)
  • KDE Image Program Interface schema (kipi)
  • Microsoft Photo schema (MicrosoftPhoto)
  • iView Media Pro schema (mediapro)
  • Microsoft Expression Media schema (expressionmedia)
  • Microsoft Photo 1.2 schema (MP)
  • Microsoft Photo RegionInfo schema (MPRI)
  • Microsoft Photo Region schema (MPReg)
  • Metadata Working Group Regions schema (mwg-rs)
• Signature engine to highlight common exposure on over 120 signatures
• Hash digest generation
• Preview thumbnail extraction
• ELA (Error Level Analysis)
• Preview thumbnail consistency check with original image
• Filetype detection
• GPS Localization and Google Maps view

What's next?

Several improvements to analysis, to user functionalities, further API with analyzed data. In the near future the code that runs this site will be released publicly under an Open Source license.

Browser upload

Use the image upload form in the homepage. Select the file to upload, if you want flag the analysis as private. You will be immediatly redirected to your image analysis. Please remember that if you marked the analysis as private, the only way to reach it is know the URL.

API upload

A simple REST API is provided for automatic usage. You can develop your automatic submission tool on top of that.

To submit an image just send a HTTP POST request:

POST /api/submit
Parameters:

• image: image file
• private: boolean to keep analysis private if it's true or public if it's false. Available values are: True and False, 1 and 0, on and off, yes or no

Example submission:

$ curl -kis -F private=true -F image=@my_file.jpg http://www.imageforensic.org/api/submit/
			

Example response:

{"url": "http://www.imageforensic.org/show/b770e7d37b2b0c1174761f8bfcc39e6b/50d4875995b27a2a3c00000d", "success": true}
			

The response is a "200 OK" and it is composed by the following fields in JSON format:

• success: [true or false] status of analysis, if it gots some errors it will be false
• url: [string] if the analysis is success an url parameter with the analysis's report URL will be present

Faithful usage

Please don't overload the site with too much requests.

The service is provided for free to you, but someone have to pay for server hosting, so the site havn't got so much horse power. Hardware is not free (see support section).

If you plan to generate a bunch of requests, please write me before. Abusers will be banned to preserve the service availability.

To report bugs, suggest new features, or something else just write me. Any kind of feedback is always welcome.

To support this site, you can click on the Flattr button on the right. Any help is really appreciated! This service is provided for free, but real money is needed to pay bills.

Email:

Twitter:

@jekil