Skip to main content

Forensics & Binary

LSB Extractor

Find and collect LSB from the supplied input. Add the content, choose the checks, and review the reported details.

Tool workspace

Your input stays in this browser.

Add the required input to continue.

Needs input

Run the tool when your input is ready.

Drop files here or choose files.

Choose an image from this device. File bytes stay in this browser.

Options

Your result appears here

Find and collect LSB from the supplied input. Add the content, choose the checks, and review the reported details.

This tool runs open-source code from CyberChef by GCHQ (Apache License 2.0). See open-source credits.

LSB Extractor performs image bit-plane extraction on supplied binary or media data. It reads the selected bit from decoded pixel channels and packs the collected bits into output bytes.

It reads the selected bit from decoded pixel channels and packs the collected bits into output bytes. This result runs in the browser for this catalog category. Processing runs in the browser.

Embedded-file analysis reports or copies byte ranges; it does not make extracted content safe or attribute its source.

Instructions

  1. Provide file or files for this tool.
  2. Start with Row order and one channel to make a controlled fixture. This applies to LSB Extractor.
  3. Change one setting at a time when investigating a known embedding pattern. This applies to LSB Extractor.

Example

Input: Use a small lossless PNG, Colour Pattern #1 R, other patterns empty, Pixel Order Row, and Bit 0.

Settings: LSB Extractor: Colour Pattern selects R, G, B, or A in extraction order. Bit ranges from 0 through 7; Bit 0 selects the least significant bit.

Result: It reads the selected bit from decoded pixel channels and packs the collected bits into output bytes.

Limits

  • LSB Extractor: The byte result does not prove that an image contains an intentional hidden message.
  • LSB Extractor: Recompression and pixel changes can destroy embedded low-bit data; preserve the original image.