Digital forensics / Everyday tools
Find what your files, photos and links reveal.
Xrayd gives you ten fast tools for inspecting digital artifacts, investigating websites, and checking what information your files expose. Inspect files, photos, browsers and links instantly. Your local investigations stay in your browser.
Start instantly. No sign-up.
Ten tools
Inspect. Investigate. Understand.
Photo Forensics
Read the metadata your image carries.
Extract camera settings, GPS coordinates, timestamps, software signatures, and dozens of other fields embedded in JPEG, PNG, WebP, and HEIC files.
Open tool →Website Detective
Identify the technologies a website exposes.
Inspect HTML patterns, script URLs, response headers, and meta tags to identify frameworks, CMS, analytics, CDN, hosting, and payment platforms.
Open tool →URL Investigator
Follow redirects and inspect the response.
Trace every redirect hop, check HTTP status codes, inspect response headers, verify security headers, and extract page metadata from any public URL.
Open tool →Secret Scanner
Check code for credentials and token-like strings.
Paste code or upload a file and scan locally for AWS credentials, JWTs, GitHub tokens, API keys, database connection strings, and other credential patterns.
Open tool →File Forensics
Inspect the metadata and structure inside a file.
Detect the true file type using magic bytes, read PDF author and creation metadata, inspect JSON structure, and list ZIP archive contents.
Open tool →Browser Fingerprint
Examine the signals your browser exposes.
Read your browser's user agent, screen resolution, hardware concurrency, language, timezone, and WebGL rendering context.
Open tool →File Hash Detective
Calculate and compare file checksums.
Generate SHA-256 hashes locally in your browser to verify file integrity, or compare two files side-by-side to ensure they are identical.
Open tool →Email Header Detective
Analyse raw email headers and delivery routes.
Paste raw email headers to trace the delivery route, identify the true sender, and verify SPF, DKIM, and DMARC authentication results.
Open tool →JWT Inspector
Decode and inspect JSON Web Tokens.
Safely decode the header and payload of any JWT without sending it to a server. Inspect claims, algorithm details, and expiration times.
Open tool →Hex Inspector
View the raw binary data of any file.
Render files as hexadecimal and ASCII grids. Identify missing file extensions by reading magic byte signatures at the file header.
Open tool →Why it exists
Useful technical tools without the technical ceremony.
Most of these checks normally require browser developer tools, command-line utilities or specialized software. Xrayd puts the useful parts into focused interfaces anyone can use.
Start investigating.
Choose a tool and see what you find.