Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Additional improvements to PDFInfo service #103

Open
wants to merge 10 commits into
base: master
Choose a base branch
from
Open

Additional improvements to PDFInfo service #103

wants to merge 10 commits into from

Conversation

wootski
Copy link
Contributor

@wootski wootski commented Apr 2, 2015

This pull request includes a number of proposed changes from pull request #94.

Key features:

  • PDFid output is now sorted by item count.
  • Improvements to the detection of files being stored within PDF streams.
  • Addition of JavaScript helper functions.
  • Identify embedded PDF documents i.e. PDF documents that are concatenated together.
  • PDF Detection techniques:
    • Use of PDFid results to identify interesting details: pdf encryption, javascript etc.
    • Identify features in JavaScript content using string matching.

Comments:

  • JavaScript detection strings were developed from the analysis of all PDF samples available on ContagioDump.

wootski added 10 commits March 27, 2015 11:55
@wootski
Update PDFInfo imports
c699d0e 
- Added imports for adding child objects
- re-order existing imports to look nicer
@wootski
Render runtime config form.
098a569 
- Prompt user to submit suspicious PDF child objects.
@wootski
Testing child files and improvements to object identification.
269cd6f 
- Testing code included for submitting child objects of interest
- Improvements to identifying object content type.
@wootski
Bug fix: incorrectly referencing data
c657597
@wootski
Sort PDFid output
6e6965a 
- Items now sorted by count.
@wootski
Add detection using PDFid
c3ecb6a 
- Notify user of JavaScript, encryption and open actions
- Look for uneven counts of obj and endobj
@wootski
Add JavaScript helper functions
aae712a 
- JS minimization
- JS formatting using the jsbeautifier library
@wootski
PDF Detection techniques and formatting changes
d53fc25 
- PEP8 changes
- Locate embedded PDF documents
- Detect PDF strings of interest
- Submit child files based on JS/file header detection
@wootski
Additional header for compressed Flash files.
ff72469
@wootski
Merge branch 'master' of git://github.com/crits/crits_services into p…
0968a88 
…dfinfo
@moshekaplan moshekaplan mentioned this pull request Feb 7, 2017
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
1 participant
@wootski