Finding Secrets in PDF Files
summary
Live demos show concrete attacks and fixes: using Acrobat content analysis to extract underlying text and edit embedded images reveals supposedly redacted words; malformed PDF bookmarks expose entire redacted pages in an EU contract; an automatically generated index uncovers names (e.g., "Clinton") missed by manual redaction in a court filing; printer microdot identifiers reveal serial and timestamp metadata from scanned pages. Recommendation: redact in the source, then run sanitization in Acrobat (not untrusted cloud editors), or recreate the document from scratch.
AI-written summary · about
chapters (10)
- 0:00Introduction to talk
- 1:05Live demo setup
- 5:45Redaction analysis techniques
- 9:28Bookmarks revealing secrets
- 12:19Court document redaction flaw
- 16:36Finding printer microdots
- 23:20Proper PDF redaction steps
- 27:57Risks of online PDF tools
- 34:12Manual vs automated solutions
- 38:35Checking PDF sanitization
related talks
20mUltraviolet: Turn Hidden Document Data into an AI Advantage
44mHow to Break PDF Encryption
01h 06mPDF Attack: A Journey from the Exploit Kit to the Shellcode (Part 2/2)
41m1 Trillion Dollar Refund – How To Spoof PDF Signatures
25mPDF Mirage: Content Masking Attack Against Information-Based Online Services
33mPDF - Mess With The Web
48mTackling Privilege Escalation with Offense and Defense
45mAutomate and protect your documents with Adobe and Microsoft 365