I have been keeping a private collection of malicious PDFs (not for long - ;) ) stored in my MongoDB repository. The collection started off with 30 and progressed as I pulled PDFs off the Internet and the local network. I now have a couple thousan...
Read more →For those who read my blog and follow my research then you know I chose MongoDB as my backend database to store my PDFs and if you don't, well now you know. The catch is that I don't actually store the file in the database like some people/scripts...
Read more →In my last post I mentioned that I wanted to put together an API for my malpdfobj tool, so sharing could be easier. The good news is that I have the RESTful API functioning complete with interactive API documentation, python interfaces and the abi...
Read more →I wanted to wait on releasing this until I made some more queries, but that may take a few days, so here it is now. The night I got all my malicious files into my MongoDB instance I started to query. One of the first things I wanted to tackle was ...
Read more →Since releasing the malpdfobj tool (~24 hours), I have been running and testing it. I found a couple bugs that caused issues when inserting some samples into the database, but those are all now fixed (and documented on github). The current code de...
Read more →