Trawl is a CTF toolkit that runs entirely in your browser. Drop in a suspicious file and every check fires at once, then ranks what looked wrong. Nothing uploads, because there is no server to upload to. Cuttlefish, the steganography module, brute-forces LSB extraction across 42 parameter combinations, walks PNG chunks, validates CRCs against contents, and hunts for data hidden past the end of the file. The analysis core is hand-written Rust compiled to WASM with zero dependencies. No steganography library, no image library, no EXIF parser. I built it because the existing workflow is five separate tools in three languages, and because a vision model physically cannot see the bits a payload lives in.
A visual regex playground that breaks down patterns in plain English, built for people learning regex and developers who keep forgetting it.