|
| 1 | +This module downloads PDF files and extracts the author's name from the document metadata. |
| 2 | + |
| 3 | +## Verification Steps |
| 4 | + |
| 5 | + 1. Start `msfconsole` |
| 6 | + 2. Do: `use auxiliary/gather/http_pdf_authors` |
| 7 | + 3. Do: `set URL [URL]` |
| 8 | + 4. Do: `run` |
| 9 | + |
| 10 | + |
| 11 | +## Options |
| 12 | + |
| 13 | +**URL** |
| 14 | + |
| 15 | +The URL of a PDF to analyse. |
| 16 | + |
| 17 | +**URL_LIST** |
| 18 | + |
| 19 | +File containing a list of PDF URLs to analyze. |
| 20 | + |
| 21 | +**OUTFILE** |
| 22 | + |
| 23 | +File to store extracted author names. |
| 24 | + |
| 25 | + |
| 26 | +## Scenarios |
| 27 | + |
| 28 | +### URL |
| 29 | + |
| 30 | + ``` |
| 31 | + msf auxiliary(http_pdf_authors) > set url http://127.0.0.1/test4.pdf |
| 32 | + url => http://127.0.0.1/test4.pdf |
| 33 | + msf auxiliary(http_pdf_authors) > run |
| 34 | +
|
| 35 | + [*] Processing 1 URLs... |
| 36 | + [*] Downloading 'http://127.0.0.1/test4.pdf' |
| 37 | + [*] HTTP 200 -- Downloaded PDF (38867 bytes) |
| 38 | + [+] PDF Author: Administrator |
| 39 | + [*] 100.00% done (1/1 files) |
| 40 | +
|
| 41 | + [+] Found 1 authors: Administrator |
| 42 | + [*] Auxiliary module execution completed |
| 43 | + ``` |
| 44 | + |
| 45 | +### URL_LIST with OUTFILE |
| 46 | + |
| 47 | + ``` |
| 48 | + msf auxiliary(http_pdf_authors) > set outfile /root/output |
| 49 | + outfile => /root/output |
| 50 | + msf auxiliary(http_pdf_authors) > set url_list /root/urls |
| 51 | + url_list => /root/urls |
| 52 | + msf auxiliary(http_pdf_authors) > run |
| 53 | +
|
| 54 | + [*] Processing 8 URLs... |
| 55 | + [*] Downloading 'http://127.0.0.1:80/test.pdf' |
| 56 | + [*] HTTP 200 -- Downloaded PDF (89283 bytes) |
| 57 | + [*] 12.50% done (1/8 files) |
| 58 | + [*] Downloading 'http://127.0.0.1/test2.pdf' |
| 59 | + [*] HTTP 200 -- Downloaded PDF (636661 bytes) |
| 60 | + [+] PDF Author: sqlmap developers |
| 61 | + [*] 25.00% done (2/8 files) |
| 62 | + [*] Downloading 'http://127.0.0.1/test3.pdf' |
| 63 | + [*] HTTP 200 -- Downloaded PDF (167478 bytes) |
| 64 | + [+] PDF Author: Evil1 |
| 65 | + [*] 37.50% done (3/8 files) |
| 66 | + [*] Downloading 'http://127.0.0.1/test4.pdf' |
| 67 | + [*] HTTP 200 -- Downloaded PDF (38867 bytes) |
| 68 | + [+] PDF Author: Administrator |
| 69 | + [*] 50.00% done (4/8 files) |
| 70 | + [*] Downloading 'http://127.0.0.1/test5.pdf' |
| 71 | + [*] HTTP 200 -- Downloaded PDF (34312 bytes) |
| 72 | + [+] PDF Author: ekama |
| 73 | + [*] 62.50% done (5/8 files) |
| 74 | + [*] Downloading 'http://127.0.0.1/doesnotexist.pdf' |
| 75 | + [*] HTTP 404 -- Downloaded PDF (289 bytes) |
| 76 | + [-] Could not parse PDF: PDF is malformed |
| 77 | + [*] 75.00% done (6/8 files) |
| 78 | + [*] Downloading 'https://127.0.0.1/test.pdf' |
| 79 | + [-] Connection failed: Failed to open TCP connection to 127.0.0.1:443 (Connection refused - connect(2) for "127.0.0.1" port 443) |
| 80 | + [*] Downloading 'https://127.0.0.1:80/test.pdf' |
| 81 | + [-] Connection failed: SSL_connect returned=1 errno=0 state=unknown state: unknown protocol |
| 82 | +
|
| 83 | + [+] Found 4 authors: sqlmap developers, Evil1, Administrator, ekama |
| 84 | + [*] Writing data to /root/output... |
| 85 | + [*] Auxiliary module execution completed |
| 86 | + ``` |
| 87 | + |
0 commit comments