Comments on: PDF Tools http://blog.didierstevens.com (blog 'DidierStevens) Wed, 08 Feb 2012 19:23:01 +0000 hourly 1 http://wordpress.com/ By: Re: pdf attacks vectors | Net Cleaner http://blog.didierstevens.com/programs/pdf-tools/#comment-49952 Sat, 21 Jan 2012 18:29:56 +0000 http://didierstevens.wordpress.com/?page_id=837#comment-49952 [...] Related great tools: http://blog.didierstevens.com/programs/pdf-tools/ [...]

]]> By: Attributes of a Zero Dollar Malware Analysis System « secanalysis.com http://blog.didierstevens.com/programs/pdf-tools/#comment-49771 Mon, 16 Jan 2012 17:21:16 +0000 http://didierstevens.wordpress.com/?page_id=837#comment-49771 [...] PDF-Parser (http://blog.didierstevens.com/programs/pdf-tools/) [...]

]]> By: Didier Stevens http://blog.didierstevens.com/programs/pdf-tools/#comment-49558 Wed, 11 Jan 2012 20:15:53 +0000 http://didierstevens.wordpress.com/?page_id=837#comment-49558 @InkBlots Take a look at my PDF workshop, I’ve an exercise for AcroForm. AcroForm can contain JavaScript that is executed when a document is opened.

]]> By: Inkblots http://blog.didierstevens.com/programs/pdf-tools/#comment-49556 Wed, 11 Jan 2012 19:40:23 +0000 http://didierstevens.wordpress.com/?page_id=837#comment-49556 Hello Didier,

Thank you for providing these tools.

I have scanned a PDF I suspect may be malicious with your pdfid script, and it returned 0 for everything but ” /AcroForm 1″. I see above that acroform is not described in the pdfid summary. Could you please tell the meaning of this, and how to tell whether it is harmful?

]]> By: Exploit writing tutorial part 11 : Heap Spraying Demystified | Corelan Team http://blog.didierstevens.com/programs/pdf-tools/#comment-49187 Sat, 31 Dec 2011 23:32:58 +0000 http://didierstevens.wordpress.com/?page_id=837#comment-49187 [...] purpose, or write a custom tool ourselves. For the sake of this tutorial, I’ll stick with Didier Steven’s excellent “make-pdf” python script (which uses the mPDF [...]

]]> By: Didier Stevens http://blog.didierstevens.com/programs/pdf-tools/#comment-46700 Wed, 19 Oct 2011 16:52:01 +0000 http://didierstevens.wordpress.com/?page_id=837#comment-46700 @Ishwar: I assume you’re running Windows? Then you install Python 2.X (not version 3), open a command line (cmd.exe) and type pdfid.py test.pdf where test.pdf is the file you want to check.

]]> By: Ishwar http://blog.didierstevens.com/programs/pdf-tools/#comment-46672 Tue, 18 Oct 2011 12:20:46 +0000 http://didierstevens.wordpress.com/?page_id=837#comment-46672 Hello,

Can some one help me to figure out how to use this pdfid tool. I have python inerpretor installed but would like to know how I can specify which file or directory I want this tool to parse.

I am new to Python.

]]> By: Tom http://blog.didierstevens.com/programs/pdf-tools/#comment-46632 Sun, 16 Oct 2011 15:21:10 +0000 http://didierstevens.wordpress.com/?page_id=837#comment-46632 All done https://github.com/thomcarver/pdf-tools

]]> By: Didier Stevens http://blog.didierstevens.com/programs/pdf-tools/#comment-46629 Sun, 16 Oct 2011 13:23:52 +0000 http://didierstevens.wordpress.com/?page_id=837#comment-46629 @Tom No problem, let me know where.

]]> By: Tom http://blog.didierstevens.com/programs/pdf-tools/#comment-46628 Sun, 16 Oct 2011 13:03:51 +0000 http://didierstevens.wordpress.com/?page_id=837#comment-46628 Hi Didier, thanks for providing these tools, would you have any objection to me adding them to a public github repo so people can contribute any fixes/extensions they have?

]]>