Interactive PDF Analysis (IPA) allows researchers to explore PDF files in-depth, extracting payloads, understanding object relationships, and identifying elements relevant to identifying malicious content. Inspired by Zynamics’ PDF dissector, IPA simplifies analysis of PDF files, providing a graphical interface to visualize object relationships, export stream content, and display dictionary content. IPA does not require additional software and can salvage useful information from damaged files. Installation is simple, requiring only Rust and cargo. Limitations include lack of heuristics, no support for encrypted PDFs, and some object types not being viewable. Feedback and suggestions for improvement are welcome at [email protected].
https://github.com/seekbytes/IPA