3 ms·
I didn't expect this to be as 'Horrifying' as it was. Has anyone written a script yet to identify whether or not a given PDF contains executable script?
by ajxs 6y ago
I didn't expect this to be as 'Horrifying' as it was. Has anyone written a script yet to identify whether or not a given PDF contains executable script?
- segfaultbuserr 6y agoQubesOS has a "TrustedPDF converter" [0] that sanitizes a PDF to the extreme level for ultimate security - it converts the entire PDF to RGB pixmaps in an isolated virtual machine. The author has a blog post at [1]. Obviously you lose the ability to use the menu, search, copy or paste, but it's as 0day-proof as you can get for a horrifying file format. [0] https://github.com/QubesOS/qubes-app-linux-pdf-converter https://github.com/QubesOS/qubes-app-linux-pdf-converter [1] https://blog.invisiblethings.org/2013/02/21/converting-untrusted-pdfs-into-trusted.html https://blog.invisiblethings.org/2013/02/21/converting-untru...
- ris 6y agohttps://verapdf.org/ https://verapdf.org/
- joveian 6y agopdfinfo in poppler does this