Please sign in to comment.
- Loading branch information...
Showing with 76 additions and 31 deletions.
|@@ -0,0 +1,46 @@|
|+drop_invoice.php - uses the forms, lists and other information to produce an invoice packed with exploits|
|+drop_news.php - uses RSS to produce PDF files with current news information packed with exploits|
|+drop_packed.php - takes in a directory of "good" PDF files and packs them with exploits|
|+- Version is taken into account so that exploits are not fired if the reader is not vulnerable|
|+- Files are encrypted using RC4|
|+- Metadata is pulled from "known good" PDF files|
|+Inheritance Chain (from end to start)|
|+FPDF uses inheritance to achieve a full featureset. If you want more features, those features must then be included in the inheritance chain to be taken advantage of. These may not all be used, but by having them in the chain means you can activate them at the highest level of the construction (exploit generation).|
|+PDF_Exploit (pdf_exploit_generator.class.php => Provides exploit packing and building|
|+FPDF_Protection (protection.class.php) => Provides encryption functionality|
|+concat_pdf (concat.class.php) => Provides the ability to concatenate two different PDF files (used in packing)|
|+FPDI (fpdi.php) => Provides major functionality for generating documents|
|+Using the Library in Existing Projects|
|+Ensure all files are present at the root level and include pdf_exploit_generator.class.php.|
|+Generating the document:|
|+$pdf = new PDF_Exploit( 'P', 'mm', 'A4' );|
|+Adding an exploit (reference the class for methods):|
|+Building the object with the exploits:|
|+Output the PDF:|