malicious-pdf
This tool produces 67 different harmful PDF test files to test PDF readers, converters, and vulnerabilities in web applications. The script, which can be used in conjunction with Burp Collaborator or Interact.sh, allows testing SSRF, XSS, XXE, NTLM credentials ambition and data leak scenarios. You can optionally specify the custom output directory for the output files, hide the author metadata, and apply different levels of hiding (obfuscation).
jonaslejon · Security & Penetration Testing
Common commercial products in this category: Burp Suite Professional, Nessus, Cobalt Strike
- You create test PDF files by giving the Burp Collaborator or Interact.sh address as a parameter.
- You encrypt JavaScript loads using different cloaking levels and taban64 decoder wrappers.
- You use produced PDF outputs for security testing in file upload endpoint and web applications.
- • NeutralGitHub Issue
Error while generating PDF
“Error while generating PDF”
- • NeutralGitHub Issue
Broken PDFs
“The generated PDFs have an empty line or comments at the beginning. This leads to errors when opening the pdf files depending on the technology. For example, if a program looks for %PDF-1. at the beginning of the PDF file, uploading or opening the file will fail. Best Regards”
My note
Alternative pages
More in: Security & Penetration Testing
- PayloadsAllTheThings★ 82,253 · today
- strix★ 72,968 · today
- Metasploit Framework★ 39,279 · today
- Trivy★ 38,868 · today
- CyberChef★ 36,270 · yesterday
- pentagi★ 32,822 · 8 days ago