Architecture Overview

How Hexwilt delivers safe file corruption

Hexwilt is a WebAssembly-powered corruption engine that runs entirely in your browser. No uploads, no background services - just deterministic, auditable byte mutations.

1. Load the engine

Hexwilt loads a lightweight WebAssembly module (~1.2 MB) that contains the corruption primitives. Once cached, it works offline.

2. Analyze the file

We fingerprint the format locally, identify high-impact regions (headers, streams, chunks), and prepare deterministic seeds.

3. Apply the corruption recipe

The chosen mode mutates bytes in-memory. No copies are uploaded. Each run logs the seed, offsets, and checksums.

4. Export report + artifact

Download the corrupted file and a JSON report that captures everything needed to replay or audit the mutation.

Privacy & security guarantees

Local-only processing

Files never leave your browser tab. Disconnect from the network after loading the app to prove it.

Deterministic seeds

Every corruption stores the seed so you can reproduce the exact byte pattern in automation or audits.

Format-aware heuristics

Modes know which structures to target - cross-reference tables for PDFs, central directories for ZIPs, and so on.

Audit-ready reports

JSON + optional PDF reports include hashes before/after, byte counts, and timestamps for compliance.

Inside the pipeline

The Hexwilt pipeline is modular. Each corruption mode plugs into a shared orchestration layer that tracks file metadata, generates seeds, and logs every byte touched. The architecture is documented and audited so security teams can review the exact code path.

Execution stages

Scan: Detect format, size, and critical structures such as headers, tables, or atoms.

Plan: Generate deterministic targets based on the corruption mode and intensity slider.

Mutate: Apply byte-level changes using WebAssembly routines optimized for speed.

Verify: Recalculate checksums and capture before/after hashes for the report.

Report: Serialize all metadata, including seeds, offsets, and heuristics used.

Why teams trust Hexwilt

SOC2-ready processes with downloadable audit artifacts.
Works offline for air-gapped labs, classrooms, and on-site compliance checks.
CLI parity so you can reproduce browser runs inside CI pipelines.
Extensible recipes - write your own mode, plug it into the engine, and keep the reporting layer.

Ready to see the pipeline in action?

Load a file below, choose a corruption mode, and review the generated report to understand every byte that changed.