ScrapPY

🐕 ScrapPY: Scrapeo de PDFs Hecho Fácil ScrapPY es una utilidad de Python para extraer información de manuales, documentos y otros PDFs sensibles para generar listas de palabras personalizadas que pueden ser utilizadas por herramientas de seguridad ofensiva para realizar ataques de fuerza bruta,...

writehat

WriteHat es una herramienta de informes que elimina Microsoft Word y muchas horas de sufrimiento del proceso de generación de informes. Markdown -- HTML -- PDF. Creada por probadores de penetración, para probadores de penetración, pero puede usarse para generar cualquier tipo de informe. Escrito...

CVE-2024-9935

CVE-2024-9935 - PDF Generator Addon for Elementor Page Builder = 1.7.5 - Unauthenticated Arbitrary File Download Overview The PDF Generator Addon for Elementor Page Builder plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.7.5 via the rtwpgaepbdwnldpdf...

CVE-2026-26830

CVE-2026-26830: OS command injection in pdf-image Summary pdf-image through version 2.0.0 allows OS command injection via the pdfFilePath argument. The package builds shell command strings with util.format and executes them with childprocess.exec. If an application passes an attacker-controlled...

CVE-2025-64512---pdfminer.six-Remote-Code-Execution-RCE-

CVE-2025-64512 - pdfminer.six Remote Code Execution RCE -orange WARNING – EDUCATIONAL USE ONLY This proof-of-concept is for authorized security testing and educational purposes only. Use only on systems you own or have explicit written permission to test. The author is not responsible for any...

Embedded-PDF

Embedded Backdoor Connection via PDF Files 😈 brought to you by Introduction This demonstration video shows how we can control the victim's device by sending the innocent-looking PDF file to the target which actually consists of embedded payload. The exploit was made public as CVE-2010-1240. As so...

CVE-2024-9935

CVE-2024-9935 PDF Generator Addon for Elementor Page Builder = 1.7.5 - Unauthenticated Arbitrary File Download Description The PDF Generator Addon for Elementor Page Builder plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.7.5 via the rtwpgaepbdwnldpdf...

operative-framework

operative framework es un marco de investigación digital, puedes interactuar con múltiples objetivos, ejecutar múltiples módulos, crear enlaces con objetivos, exportar informes a archivos PDF, agregar notas a objetivos o resultados, interactuar con la API RESTful, escribir tus propios módulos...

CVE-2023-33733

CODE INJECTION VULNERABILITY IN REPORTLAB PYTHON LIBRARY tl;dr This write-up details how an RCE in Reportlab - was found and exploited. Due to the prevalence of Reportlab in HTML to PDF processing, this vulnerability may be reachable in many applications that process PDF files, making this an...

pdfgrab

pdfgrab Version 0.4.9 What is it? This is a reborn tool, used during the epoche dinosaurs were traipsing the earth. Basically it analyses PDF files for Metadata. You can direct it to a file or directory with pdfs. You can show it the url of a pdf or use the integrated googlesearch thanx to mario...

pdfresurrect

pdfresurrect PDFResurrect is a tool aimed at analyzing PDF documents. The PDF format allows for previous document changes to be retained in a more recent version of the document, thereby creating a running history of changes for the document. This tool attempts to modify the PDF so that a reading...

Embedded-Backdoor-Connection

Embedded Backdoor Connection via PDF Files 😈 brought to you by Introduction This demonstration video shows how we can control the victim's device by sending the innocent-looking PDF file to the target which actually consists of embedded payload. The exploit was made public as CVE-2010-1240. As so...

CVE-2022-45025

CVE-2022-45025 Command injection via PDF import in Markdown Preview Enhanced VSCode, Atom Description The Mume markdown tool library was vulnerable to command injection due to use of spawn command with shell: true option. This could allow an attacker to achieve arbitary code execution by tricking...

CanaryTokenScanner

Escáner de CanaryToken / HoneyToken Detecta URLs sospechosas incluyendo CanaryTokens dentro de documentos de Microsoft Office y PDFs. Formatos compatibles: Office Open XML: .docx, .xlsx, .pptx .pdf .zip archivos genéricos Por qué existe esto Los CanaryTokens y HoneyTokens y otras URLs de...

CVE-2019-13288

CVE-2019-13288 – Infinite Recursion in Xpdf's Parser::getObj Overview CVE-2019-13288 is a vulnerability identified in Xpdf version 4.01.01 , specifically within the Parser::getObj function in Parser.cc. This flaw can lead to infinite recursion when processing a specially crafted PDF file, resulti...

Sublist3r

About Sublist3r Sublist3r is a python tool designed to enumerate subdomains of websites using OSINT. It helps penetration testers and bug hunters collect and gather subdomains for the domain they are targeting. Sublist3r enumerates subdomains using many search engines such as Google, Yahoo, Bing,...

webvulscan

WebVulScan Synopsis WebVulScan is a web application vulnerability scanner. It is a web application itself written in PHP and can be used to test remote, or local, web applications for security vulnerabilities. As a scan is running, details of the scan are dynamically updated to the user. These...

webvulscan

WebVulScan Sinopsis WebVulScan es un escáner de vulnerabilidades de aplicaciones web. Es una aplicación web escrita en PHP que se puede utilizar para probar aplicaciones web remotas o locales en busca de vulnerabilidades de seguridad. Mientras se ejecuta un escaneo, los detalles del escaneo se...

unredactor

Un-Redactor A PDF editing tool that lets you unredact, put your own information over a redaction box, and extract all text. This tool is for forensics purposes. It does not "recover" data truly destroyed by redaction tools. It can process large data sets and convert all at once to a HTML pages wi...

CVE-2026-34621

CVE-2026-34621 : Adobe Acrobat 2026 Prototype Pollution & JS Injection Chain — Research PoC Overview This repository contains research material and proof-of-concept code developed during the analysis of the 2026 Adobe Acrobat Reader in-the-wild exploit chain involving: Prototype Pollution Interna...