Search Results for "image metadata"

Free, browser-based digital authenticity toolkit (GPL-2.0). Watermark images (9 algorithms), audio (8) and documents (5); compute 21 fingerprint hashes; sign and verify C2PA provenance; issue Ed25519/P-256/RSA DID keys; generate PDF/DOCX/EPUB certificates; forensic ELA/noise/JPEG-marker analysis. Vanilla JS, no framework, runs fully client-side. Not a full PDF editor - watermarking, provenance and verification only.

As an open source penetration testing tool, IPTC-Attacker allows to create an image with IPTC metadata containing testing vectors for Cross-Site Scripting attacks. Each checkbox can be used to include a huge collection of payloads into the selected tags (HTML5sec, XSS Cheat Sheet). If a checkbox will be not selected, the string aaa'bbb"ccc<ddd is automatically included into the unchecked IPTC tag. Therefore, testing for XSS vulnerabilities via IPTC metadata is possible by looking into the source code of the attacked Web application; strictly speaking for aaa'bbb"ccc<ddd or alternatively by verifying if, for example, alert-windows appear due to the XSS vector collection.