Skip to content

Releases: phishdestroy/taylor-wessing-data-breach-toolkit

Release list

v1.0.0 - Production Launch of the Universal PDF Redaction Auditor & Layer Decomposer

v1.0.0 - Production Launch of the Universal PDF Redaction Auditor & Layer Decomposer Latest
Latest

Choose a tag to compare

View all tags
@phishdestroy phishdestroy released this 19 Aug 19:06
v1.0.0
fc09f5a

🔍 Release Overview (v1.0.0)

We are proud to announce the first official public release of the Universal PDF Redaction Auditor & Layer Decomposer Suite. This enterprise-grade forensic auditing and layer decomposition utility is specifically engineered to identify, verify, and sanitize visual-only PDF redaction vulnerabilities completely client-side.

This release includes both the offline-first interactive browser dashboard (index.html) and the high-performance Python CLI multi-tool (decensor.py).

🛠️ Key Capabilities Included in v1.0.0

📡 1. X-Ray Scanner Mode (Interactive Web GUI)

  • Dual-Pane Split-Screen View: Renders the page visually on the left while compiling a geometrically aligned raw text stream of the current page in a synchronized terminal on the right.
  • Metadata Profiling: Automatically extracts document metadata (Creator, Producer, timestamps) and flags known insecure automated exporters (such as Aspose.PDF).
  • Lossless Web Sanitizer: Uses custom pdf-lib stream-level decoding with 100% lossless Latin-1 byte mapping, completely eliminating PDF stream corruption during the removal of visual mask layers.

✂️ 2. The Decomposer (Global Stream Layer Stripper)

  • Cross-Reference Stream Scanning: Traverses all indirect objects, including standard page streams and nested resource dictionaries (Form XObjects).
  • Graphic Operation Purge: Surgically replaces rectangular visual fill/stroke commands (re f, re b, etc.) with non-painting operators (re n), dropping the black visual drawing layers to exactly 0 while leaving the underlying text intact.

🔎 3. Collision Auditing Engine (Python CLI)

  • Geometric Interaction Checks: Runs bounding-box overlap checks between visual shape paths and text coordinates to empirically verify active PII leaks under redactions.
  • Element Profiling (-l): Generates structural element breakdowns (drawings, rasters, blocks) page-by-page.
  • Credential Leak Exporter (-e): Automates the extraction of text hidden under visual masks into a structured .txt leaks report.

🔒 Security & Whistleblowing Statement

This tool operates on a strict zero-knowledge privacy model:

  1. Processing happens entirely inside your local browser sandbox or Python CLI.
  2. Zero telemetry, tracking scripts, or network requests are initiated.
  3. Your sensitive documents never leave your computer.

As detailed in SECURITY.md and the repository README, the name of this repository serves as Nominative Fair Use to identify the specific automated redaction failures generated by Taylor Wessing LLP during their handling of GDPR requests for Valve Corporation. This suite serves to address the critical power asymmetry between corporate legal entities and the vulnerable opponents/victims of their unnotified data leaks.

📦 Bundled Assets

  • pdf-redaction-auditor.zip: The complete, standalone, offline-ready forensic toolpack containing the web application, CLI utility, documentation, and pre-vendored offline JavaScript libraries (pdf.js and pdf-lib).
Assets 3
Loading