Malicious-pdf is a Python tool for generating malicious PDF test files used in security testing and penetration testing.
The tool addresses the need to test how PDF viewers, converters, and web applications handle malicious PDF payloads. It generates PDF files crafted to trigger specific security vulnerabilities including phone-home callbacks, server-side request forgery (SSRF), cross-site scripting (XSS), NTLM credential theft, and data exfiltration. The generated files can be used with external callback services like Burp Collaborator or Interact.sh to detect whether applications process the malicious content and leak sensitive information.
This tool is suited for security researchers, penetration testers, and bug bounty hunters who need to test the security posture of applications that accept PDF uploads or process PDF files. It is particularly valuable when assessing web applications, document converters, and PDF viewers for their handling of embedded malicious content. Organizations conducting internal security assessments can use it to validate that their systems properly sanitize or reject dangerous PDF payloads.
The project shows active maintenance with regular updates addressing new attack vectors and improving payload generation capabilities. Development includes responsiveness to user-reported issues and feature requests for additional payload types. The codebase demonstrates ongoing refinement of the PDF generation logic to ensure payloads remain effective across different PDF processing environments.
