peepdf

peepdf is a Python tool to perform PDF analysis in order to find out if the explored files can be harmful or not.

[peepdf @peepdf]

Fresh PDF (81fa2eb97128b6d711158f37698e044f) being used to drop docm file which downloads #Dridex Easy extraction with #peepdf ;) #malware

[peepdf @peepdf]

@ikergv Buenas! Mándame mejor correo a peepdf at eternal-todo dot com, dándome más detalles del problema o creando un issue en la cuenta del proyecto en github y lo miro 👍🏻

[peepdf @peepdf]

It seems there are still PDF vulns to be exploited... @ESET discovered a #PDF uploaded to @virustotal containing two 0days, one for Adobe Reader (CVE-2018-4990) and a sandbox bypass (CVE-2018-8120) https://t.co/PjYNp5UqfR #vulnerabilities #infosec #apt #cybercrime

[peepdf @peepdf]

Happy to see the @sekoia_fr guys using @peepdf in their new dropper analysis service (https://t.co/fk71hjzY6f) presented at #Botconf 😊

[Linux Security Labs @LSELabs]

New tool added: peepdf (PDF analysis) by @peepdf #pdf #tools https://t.co/1ueLcaKFgK

[peepdf @peepdf]

@k1LL_sw17ch @PuN1sh_3r Btw, I just saw one dropping Locky ;)

[peepdf @peepdf]

@k1LL_sw17ch @PuN1sh_3r .Yep, sure, you have more details here (with hashes) https://t.co/5OoEsdvFnU But distribution methods for both are similar, so possible :)

[peepdf @peepdf]

More details about the #Dridex campaign (botnet 7200) using PDF documents as infection vector https://t.co/5OoEsde3Zk #malware #spam #peepdf https://t.co/gtjhIh9HPn

[peepdf @peepdf]

Fresh PDF (81fa2eb97128b6d711158f37698e044f) being used to drop docm file which downloads #Dridex Easy extraction with #peepdf ;) #malware

[peepdf @peepdf]

@EricRZimmerman @JamesHabben @angealbertini @asfakian @DidierStevens Hey! With peepdf you can use the "metadata" command to extract the metadata from the document :) Really easy!

[peepdf @peepdf]

Another #malware campaign spreading PDFs (85066792c8952100ac057055a2f49a8c) to ask the user to execute docm files. The docm was detected ;)

[Cybersecurity Conferences @infosec_events]

Big thanks to Jose Miguel Esparza @peepdf @EternalTodo for interview, questions on his Kali Linux tools (Peepdf) https://t.co/vnAGXKYg5T

[peepdf @peepdf]

Detailed analysis of a heap buffer overflow in Adobe Acrobat and Reader (CVE-2016-4203) by @Fortinet https://t.co/IS2s9WVYWG #infosec #PDF

[peepdf @peepdf]

@crowdshield Hey! Give a try to peepdf too, you can send an email to share the specific PDF or ask for details ;) Cheers!

[peepdf @peepdf]

Interesting post by @DidierStevens about reconstructing a PDF file parcially encrypted by ransomware https://t.co/0KSVKmtK6M #DFIR #infosec

[peepdf @peepdf]

Comprehensive vulnerability analysis of a Use-After-Free in Adobe Acrobat and Reader (CVE-2016-4119) by @Fortinet https://t.co/aXgK12jhXN

[peepdf @peepdf]

@SeanTheGeek Sorry, I didn't see this one. Take a look at https://t.co/175Z3qAY30 ;) @angelodellaera

[Jose Miguel Esparza @EternalToDo]

@michael_yip @ProjectHoneynet @bartblaze @decalage2 Give it a try! ;) It is listed here, btw :) https://t.co/JywkQxskfF

[The Honeynet Project @ProjectHoneynet]

Jose Esparza showing how to analyze a malicious PDF, extract shellcodes and automate analysis with Peepdf #HNW2016

[𝓓ᵉⓥ𝐎ⓝ ǤŕẸєŇ𝔢 🧐 @DasMeDevon]

Learning very useful techniques on analyzing PDFs. @EternalTodo

[peepdf @peepdf]

Just added a new parameter (-C) to execute commands via command line, update! ;) #security #infosec #DFIR #tools