Linux command
pdf-parser 命令
文件
复制后可按需替换文件名、目录或参数。
常用示例
Parse PDF structure
pdf-parser [file.pdf]
Search for keyword
pdf-parser -s [keyword] [file.pdf]
Show specific object
pdf-parser -o [5] [file.pdf]
Extract streams
pdf-parser -d [output.bin] -o [5] [file.pdf]
Show statistics
pdf-parser -a [file.pdf]
Filter by object type
pdf-parser -t [/JavaScript] [file.pdf]
Decode streams
pdf-parser -f [file.pdf]
说明
pdf-parser analyzes PDF file structure. It's used for malware analysis and forensics. Object enumeration shows all PDF objects. Each object's type and contents are displayed. Searching finds embedded scripts, URLs, or suspicious content. JavaScript and launch actions are common malware vectors. Stream extraction dumps compressed or encoded data. Filters decompress FlateDecode and other encodings. Statistics summarize object types present. This quickly identifies files with unusual structures. Reference following traces object relationships. Cross-references reveal document structure.
参数
- -s _STRING_
- Search for string.
- -o _ID_
- Select object by ID.
- -t _TYPE_
- Filter by type.
- -f
- Apply stream filters.
- -d _FILE_
- Dump stream to file.
- -a
- Statistics and analysis.
- -w
- Raw output.
- -r _N_
- Reference object.
- -c
- Content stream.
- -v
- Verbose output.
FAQ
What is the pdf-parser command used for?
pdf-parser analyzes PDF file structure. It's used for malware analysis and forensics. Object enumeration shows all PDF objects. Each object's type and contents are displayed. Searching finds embedded scripts, URLs, or suspicious content. JavaScript and launch actions are common malware vectors. Stream extraction dumps compressed or encoded data. Filters decompress FlateDecode and other encodings. Statistics summarize object types present. This quickly identifies files with unusual structures. Reference following traces object relationships. Cross-references reveal document structure.
How do I run a basic pdf-parser example?
Run `pdf-parser [file.pdf]` in a terminal, then adjust file names, paths, flags, or remote targets for your system.
What does -s _STRING_ do in pdf-parser?
Search for string.