If you haven't already, grab an account at app.khao2.com for 5 free monthly scans.
Using the CLI
Khao2 CLI provides a seamless interface to submit images and monitor analysis in real-time using 339+ detection engines.
Installation
Requirements: Python 3.7+, pip, Git
git clone https://github.com/odinglyn0/k2-cli.git cd k2-cli pip install -e .
Verify installation:
k2 --help
Authorising the CLI
Sign up at app.khao2.com and generate an API token from your dashboard. Tokens follow the format k2_ followed by 32 lowercase alphanumeric characters.
k2 token set k2_yourtokenhere1234567890abcdef
Setting the Endpoint
Configure the API endpoint URL. Use this if you're running a self-hosted instance or need to point to a different region.
k2 endpoint set https://api.khao2.com
Testing Your First Image
Submit an image for stegananalysis. Supported formats: PNG, JPG, JPEG, GIF, BMP, WEBP, TIFF
k2 dig suspicious.png
For live monitoring, use the --watch flag:
k2 dig evidence.png --watch
Scan Times
| File Size | Typical Duration |
|---|---|
| < 100 KB | 0-5 minutes |
| 100 KB - 1 MB | 5-8 minutes |
| 1 MB - 10 MB | 8-12 minutes |
| > 10 MB | 12-30 minutes |
Configuration Storage
Khao2 stores configuration in a binary file at:
~/.khao2/forensicwaffle
This file contains your API token and endpoint. Keep it secure and do not share it.
Troubleshooting
"Command not found: k2"
Ensure pip installed the package to a directory in your PATH. Try reinstalling with pip install -e . --user
"Token must start with 'k2_'"
Check your token from the dashboard. Tokens must start with k2_ followed by 32 lowercase alphanumeric characters.
"Scan stuck at 0%"
The API may be under heavy load. Wait a few minutes or check status.khao2.com for outages.
Support
Documentation: docs.khao2.com
Email: support@khao2.com
GitHub Issues: github.com/odinglyn0/k2-cli/issues