Solutions to diagnose PDF files for exploits?

Question

I am downloading a PDF file, and would like to know how to diagnose security vulnerabilities in that file.

Context:

The last version of Google Chrome is giving me the following warning on a PDF download:

Trying to learn more about the alert brings me to this help page, which explains that the alert can be triggered by either

a malicious, unwanted, or uncommon file

or

the website you tried to download the file from has been known to distribute malware.

I would like to sort out which one it is, and am therefore looking for a way to scan the PDF file for potential vulnerabilities.

My guess is that any tool that indicates the existence of executable code in the file would do, but does such a tool exist?

Related: Can a PDF file contain a virus?

Upload the PDF to [VirusTotal](www.virustotal.com) if you can access it. If it is not flagged, then Chrome doesn't like the source; else it's the file (this is in fact, more likely). — Jedi, Jan 3, 2017 at 4:50

Pandora · Accepted Answer · 2017-01-10 11:42:50Z

2

peepdf and pdf-parser.py from Didier Stevens. Various online malware scanners which support PDF is good to try either.

answered Jan 10, 2017 at 11:42

Pandora

1775 bronze badges

Thank you very much. And your third link includes @Jedi's link to VirusTotal.
– Fr.
Jan 10, 2017 at 11:44
@Fr. Yes, VirustTotal is most well known in online malware scanners which anyone shouldn't forget to mention!
– Pandora
Jan 10, 2017 at 11:46

Add a comment |

1 Answer 1