PDF Forensic with MPeePDF - Revision history

EDogan at 12:26, 20 December 2021

2021-12-20T12:26:05Z

← Older revision		Revision as of 12:26, 20 December 2021
Line 72:		Line 72:
	[[File:Pdfobjectfile.png\|700px\|thumb\|center\|An object saved to a text file]]		[[File:Pdfobjectfile.png\|700px\|thumb\|center\|An object saved to a text file]]

	~~== Used Hardware ==~~

	~~[[Device to be used with this documentation]]~~
	~~[[Maybe another device to be used with this documentation]]~~

EDogan at 12:25, 20 December 2021

2021-12-20T12:25:41Z

← Older revision		Revision as of 12:25, 20 December 2021
Line 77:		Line 77:
	[[Maybe another device to be used with this documentation]]		[[Maybe another device to be used with this documentation]]

	~~== Courses ==~~

	* [[A course where this documentation was used]] (2017, 2018)
	* [[Another one]] (2018)

	== References ==		== References ==

EDogan at 12:25, 20 December 2021

2021-12-20T12:25:13Z

← Older revision		Revision as of 12:25, 20 December 2021
Line 84:		Line 84:
	== References ==		== References ==

	* https://~~wikipedia~~.~~org~~		* https://github.com/Tholep/mpeepdf
	* https://~~google~~.com		* https://github.com/jesparza/peepdf/wiki/Commands

	[[Category:Documentation]]		[[Category:Documentation]]

EDogan: /* Description */

2021-12-20T12:22:05Z

Description

← Older revision		Revision as of 12:22, 20 December 2021
Line 22:		Line 22:
	python2 mpeepdf.py -i [your.pdf]		python2 mpeepdf.py -i [your.pdf]

	[[File:Pdfanalysis.png\|700px\|thumb\|center\|~~alt text~~]]		[[File:Pdfanalysis.png\|700px\|thumb\|center\|Result of an Analysis]]

	=== Step 2 ===		=== Step 2 ===
	While inside the console, you can ~~lookup~~ more things like metadata, specific information about streams and objects and much more. To see all available command type in help into the console.		While inside the console, you can look up more things like metadata, specific information about streams and objects and much more. To see all available command type in help into the console.

	[[File:pdfhelp.png\|700px\|thumb\|center\|All Options available]]		[[File:pdfhelp.png\|700px\|thumb\|center\|All Options available]]
Line 34:		Line 34:
	metadata		metadata

	[[File:Pdfmetadata.png\|700px\|thumb\|center\|~~alt text~~]]		[[File:Pdfmetadata.png\|700px\|thumb\|center\|Metadata of a PDF Document]]

	If you want to look at specific objects or stream ~~typ~~ in:		If you want to look at specific objects or stream type in:

	object [1]		object [1]
	stream [1]		stream [1]

	[[File:Pdfobject.png\|700px\|thumb\|center\|~~alt text~~]]		[[File:Pdfobject.png\|700px\|thumb\|center\|A object]]


Line 51:		Line 51:


	[[File:Pdfrawobject.png\|700px\|thumb\|center\|~~alt text~~]]		[[File:Pdfrawobject.png\|700px\|thumb\|center\|A raw object]]


	[[File:Pdfrawstream.png\|700px\|thumb\|center\|~~alt text~~]]		[[File:Pdfrawstream.png\|700px\|thumb\|center\|A raw stream]]


Line 64:		Line 64:
	object [1] $> var1		object [1] $> var1

	[[File:Pdfobjectvariable.png\|700px\|thumb\|center\|~~alt text~~]]		[[File:Pdfobjectvariable.png\|700px\|thumb\|center\|An object stored in a variable]]

	An export to a file is also possible with:		An export to a file is also possible with:
Line 70:		Line 70:
	object [1] > object1.txt		object [1] > object1.txt

	[[File:Pdfobjectfile.png\|700px\|thumb\|center\|~~alt~~ text]]		[[File:Pdfobjectfile.png\|700px\|thumb\|center\|An object saved to a text file]]

	== Used Hardware ==		== Used Hardware ==

EDogan: /* Step 3 */

2021-12-20T12:03:35Z

Step 3

← Older revision		Revision as of 12:03, 20 December 2021
Line 42:		Line 42:

	[[File:Pdfobject.png\|700px\|thumb\|center\|alt text]]		[[File:Pdfobject.png\|700px\|thumb\|center\|alt text]]


			The raw data of the respective object/stream can also be seen with:

			rawobject [1]
			rawstream [1]



			[[File:Pdfrawobject.png\|700px\|thumb\|center\|alt text]]


			[[File:Pdfrawstream.png\|700px\|thumb\|center\|alt text]]





	You can also store a object or stream in an variable with following command:		You can also store a object or stream in an variable with following command:

EDogan: /* Step 3 */

2021-12-20T11:59:38Z

Step 3

← Older revision		Revision as of 11:59, 20 December 2021
Line 48:		Line 48:

	[[File:Pdfobjectvariable.png\|700px\|thumb\|center\|alt text]]		[[File:Pdfobjectvariable.png\|700px\|thumb\|center\|alt text]]

			An export to a file is also possible with:

			object [1] > object1.txt

			[[File:Pdfobjectfile.png\|700px\|thumb\|center\|alt text]]

	== Used Hardware ==		== Used Hardware ==

EDogan: /* Step 3 */

2021-12-20T11:14:07Z

Step 3

← Older revision		Revision as of 11:14, 20 December 2021
Line 41:		Line 41:
	stream [1]		stream [1]

	[[File:Pdfobject.png\|~~600px~~\|thumb\|center\|alt text]]		[[File:Pdfobject.png\|700px\|thumb\|center\|alt text]]

			You can also store a object or stream in an variable with following command:

			object [1] $> var1

			[[File:Pdfobjectvariable.png\|700px\|thumb\|center\|alt text]]

	== Used Hardware ==		== Used Hardware ==

EDogan: /* Step 3 */

2021-12-20T11:11:10Z

Step 3

← Older revision		Revision as of 11:11, 20 December 2021
Line 35:		Line 35:

	[[File:Pdfmetadata.png\|700px\|thumb\|center\|alt text]]		[[File:Pdfmetadata.png\|700px\|thumb\|center\|alt text]]

			If you want to look at specific objects or stream typ in:

			object [1]
			stream [1]

			[[File:Pdfobject.png\|600px\|thumb\|center\|alt text]]

	== Used Hardware ==		== Used Hardware ==

EDogan: /* Step 3 */

2021-12-20T11:06:41Z

Step 3

← Older revision		Revision as of 11:06, 20 December 2021
Line 30:		Line 30:

	=== Step 3 ===		=== Step 3 ===
			Inside the console are many options to analyse your document. You can start by looking at the metadata of the file by typing in:

			metadata

			[[File:Pdfmetadata.png\|700px\|thumb\|center\|alt text]]

	== Used Hardware ==		== Used Hardware ==

EDogan: /* Step 3 */

2021-12-20T11:02:54Z

Step 3

← Older revision		Revision as of 11:02, 20 December 2021
Line 30:		Line 30:

	=== Step 3 ===		=== Step 3 ===




	== Used Hardware ==		== Used Hardware ==