origami 1.2.7 → 2.0.0

data/lib/origami/file.rb

@@ -1,233 +0,0 @@
-=begin
-
-= File
-	file.rb
-
-= Info
-	This file is part of Origami, PDF manipulation framework for Ruby
-	Copyright (C) 2010	Guillaume Delugré <guillaume AT security-labs DOT org>
-	All right reserved.
-	
-  Origami is free software: you can redistribute it and/or modify
-  it under the terms of the GNU Lesser General Public License as published by
-  the Free Software Foundation, either version 3 of the License, or
-  (at your option) any later version.
-
-  Origami is distributed in the hope that it will be useful,
-  but WITHOUT ANY WARRANTY; without even the implied warranty of
-  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
-  GNU Lesser General Public License for more details.
-
-  You should have received a copy of the GNU Lesser General Public License
-  along with Origami.  If not, see <http://www.gnu.org/licenses/>.
-
-=end
-
-module Origami
-
-  class PDF
-
-    #
-    # Attachs an embedded file to the PDF.
-    # _path_:: The path to the file to attach.
-    # _options_:: A set of options to configure the attachment. 
-    #
-    def attach_file(path, options = {})
-
-      #
-      # Default options.
-      #
-      params = 
-      {
-        :Register => true,                      # Shall the file be registered in the name directory ?
-        :EmbeddedName => nil,                   # The inner filename of the attachment.
-        :Filter => :FlateDecode,                # The stream filter used to store data.
-      }.update(options)
-
-      if path.is_a? FileSpec
-        filespec = path
-        params[:EmbeddedName] ||= ''
-      else
-        if path.respond_to?(:read)
-          fd = path
-          params[:EmbeddedName] ||= ''
-        else
-          fd = File.open(File.expand_path(path), 'r').binmode
-          params[:EmbeddedName] ||= File.basename(path)
-        end
-      
-        fstream = EmbeddedFileStream.new
-
-        if ''.respond_to? :force_encoding
-          fstream.data = fd.read.force_encoding('binary') # 1.9
-        else
-          fstream.data = fd.read
-        end
-
-        fd.close
-
-        fstream.setFilter(params[:Filter])
-        filespec = FileSpec.new(:F => fstream)
-      end
-
-      name = params[:EmbeddedName]
-      fspec = FileSpec.new.setType(:Filespec).setF(name.dup).setEF(
-        filespec
-      )
-      
-      register(
-        Names::Root::EMBEDDEDFILES, 
-        name.dup, 
-        fspec
-      ) if params[:Register] == true
-      
-      fspec
-    end
-
-    #
-    # Lookup embedded file in the embedded files name directory.
-    #
-    def get_embedded_file_by_name(name)
-      resolve_name Names::Root::EMBEDDEDFILES, name
-    end
-    
-    #
-    # Calls block for each named embedded file.
-    #
-    def each_named_embedded_file(&b)
-      each_name(Names::Root::EMBEDDEDFILES, &b) 
-    end
-  end
-
-  #
-  # Class used to convert system-dependent pathes into PDF pathes.
-  # PDF path specification offers a single form for representing file pathes over operating systems.
-  #
-  class Filename
-    
-    class << self
-      
-      #
-      # Converts UNIX file path into PDF file path.
-      #
-      def Unix(file)
-        ByteString.new(file)
-      end
-      
-      #
-      # Converts MacOS file path into PDF file path.
-      #
-      def Mac(file)
-        ByteString.new("/" + file.gsub(":", "/"))
-      end
-      
-      #
-      # Converts Windows file path into PDF file path.
-      #
-      def DOS(file)
-        path = ""
-        # Absolute vs relative path
-        if file.include? ":"
-          path << "/"
-          file.sub!(":","")
-        end
-        
-        file.gsub!("\\", "/")
-        ByteString.new(path + file)
-      end
-      
-    end
-    
-  end
-  
-  
-  #
-  # Class representing  a file specification.
-  # File specifications can be used to reference external files, as well as embedded files and URIs.
-  #
-  class FileSpec < Dictionary
-    
-    include StandardObject
-   
-    field   :Type,          :Type => Name, :Default => :FileSpec
-    field   :FS,            :Type => Name, :Default => :URL
-    field   :F,             :Type => [ ByteString, Stream ]
-    field   :UF,            :Type => String
-    field   :DOS,           :Type => ByteString
-    field   :Mac,           :Type => ByteString
-    field   :Unix,          :Type => ByteString
-    field   :ID,            :Type => Array
-    field   :V,             :Type => Boolean, :Default => false, :Version => "1.2"
-    field   :EF,            :Type => Dictionary, :Version => "1.3"
-    field   :RF,            :Type => Dictionary, :Version => "1.3"
-    field   :Desc,          :Type => ByteString, :Version => "1.6"
-    field   :CI,            :Type => Dictionary, :Version => "1.7"
-    field   :Thumb,         :Type => Stream, :Version => "1.7", :ExtensionLevel => 3
-
-  end
-    
-    #
-    # Class representing a Uniform Resource Locator (URL)
-    #
-    class URL < FileSpec
-    
-      field   :Type,        :Type => Name, :Default => :URL, :Required => true
-
-      def initialize(url)
-        super(:F => url)
-      end
-    end
-    
-    #
-    # A class representing a file outside the current PDF file.
-    #
-    class ExternalFile < FileSpec
-      field   :Type,        :Type => Name, :Default => :FileSpec #, :Required => true
-
-      #
-      # Creates a new external file specification.
-      # _dos_:: The Windows path to this file.
-      # _mac_:: The MacOS path to this file.
-      # _unix_:: The UNIX path to this file.
-      #
-      def initialize(dos, mac = "", unix = "")
-        
-        if not mac.empty? or not unix.empty?
-          super(:DOS => Filename.DOS(dos), :Mac => Filename.Mac(mac), :Unix => Filename.Unix(unix))
-        else
-         super(:F => dos)
-        end
-        
-      end
-
-    end
-    
-    #
-    # Class representing the data of an embedded file.
-    #
-    class EmbeddedFileStream < Stream
-     
-      include StandardObject
-      
-      field   :Type,          :Type => Name, :Default => :EmbeddedFile
-      field   :Subtype,       :Type => Name
-      field   :Params,        :Type => Dictionary
-      
-    end
-    
-    #
-    # Class representing parameters for a EmbeddedFileStream.
-    #
-    class EmbeddedFileParameters < Dictionary
-      
-      include StandardObject
-      
-      field   :Size,          :Type => Integer
-      field   :CreationDate,  :Type => ByteString
-      field   :ModDate,       :Type => ByteString
-      field   :Mac,           :Type => Dictionary
-      field   :Checksum,      :Type => String
-     
-    end
-
-end

data/samples/README.txt

@@ -1,45 +0,0 @@
-:: SUBDIRECTORIES
-=================
-
-``attachments/``
-* Adding a file attachment to a PDF document.
-
-``crypto/``
-* PDF encryption (supports RC4 40-128 bits, and AES128).
-  - crypto.rb : Create a simple encrypted document.
-  - encrypt.rb : Encrypt an existing document.
-
-``digsig/``
-* PDF digital signatures. Create a new document and signs it with test.key.
-
-``exploits/``
-* Basic exploits PoC generation.
-
-``flash/``
-* PDF with Flash object. Create a document with an embedded SWF file.
-
-``actions/launch/``
-* Launch action. Create a document launching the calculator on Windows, Unix and MacOS.
-
-``actions/loop/``
-* Create a looping document using GoTo and Named actions (see also moebius in the scripts directory). 
-
-``actions/named/``
-* Named action. Create a document prompting for printing.
-
-``actions/triggerevents/``
-* Create a document launching JS scripts on various events.
-
-``actions/webbug/``
-* Create a document connecting to a remote server.
-  - webbug-browser.rb : Connection using a URI action.
-  - webbug-reader.rb : Connection using a SubmitForm action.
-  - webbug-js.rb : Connection using JS script.
-
-``actions/samba/``
-* Implementation of a SMB relay attack using PDF. When opened in a
-  browser on Windows, the document tries to access a document shared
-  on a malicious SMB server (on a LAN). The server will then be able
-  to steal user credentials. This script merely forges the malicious
-  PDF document.
-

data/samples/actions/launch/calc.rb

@@ -1,87 +0,0 @@
-#!/usr/bin/ruby 
-
-begin
-  require 'origami'
-rescue LoadError
-  ORIGAMIDIR = "#{File.dirname(__FILE__)}/../../../lib"
-  $: << ORIGAMIDIR
-  require 'origami'
-end
-include Origami
-
-OUTPUTFILE = "#{File.basename(__FILE__, ".rb")}.pdf"
-
-puts "Generating a pdf launching calc on several OS!!"
-
-pdf = PDF.new
-
-#�Reader7.0 �
-#�A popup firstly says it cannot open the specified file. Then the
-#�file is opened once the "Open" button is clicked...
-
-# Reader8.0
-#�It "opens" the file, but does not execute it. By default, it seems
-# it is passed to the default browser.
-# Only local files can be opened this way.
-#�If the file does not exist, it displays the content of the current
-# directory
-
-cmd = FileSpec.new
-cmd.Unix = "/usr/bin/xcalc"
-cmd.Mac = "/Applications/Calculator.app"
-cmd.DOS = "C:\\\\WINDOWS\\\\system32\\\\calc.exe"
-
-action = Action::Launch.new
-action.F = cmd
-
-pdf.onDocumentOpen( action )
-
-contents = ContentStream.new
-contents.write OUTPUTFILE,
-  :x => 350, :y => 750, :rendering => Text::Rendering::STROKE, :size => 30
-
-contents.write "This page is empty but it should start calc :-D",
-  :x => 233, :y => 690, :rendering => Text::Rendering::FILL, :size => 15, :color => Graphics::Color::RGB.new(0, 150, 0)
-
-contents.write "Dont be afraid of the pop-ups, just click them...",
-  :x => 233, :y => 670, :size => 15
-
-contents.write "Comments:",
-  :x => 75, :y => 620, :rendering => Text::Rendering::FILL_AND_STROKE, :size => 14
-
-content = <<-EOS
-Windows:
-  - Foxit 2: runs calc.exe at the document opening without any user confirmation message (!)      
-  - Acrobat Reader *:
-      1. popup proposing to open \"calc.exe\" (warning)
-      2.  starts  \"calc.exe\"
-
-Mac:
-  - Preview does not support PDF keyword /Launch
-  - Acrobat Reader 8.1.2: starts Calculator.app
-
-Linux:
-  ! Assumes xcalc is in /usr/bin/xcalc
-  - poppler: does not support PDF keyword /Launch
-  - Acrobat Reader 7: 
-      1. popup telling it can not open \"xcalc\" (dumb reasons)
-      2. popup proposing to open \"xcalc\" (warning)
-      3. starts  \"xcalc\"
-  - Acrobat Reader 8.1.2: based on xdg-open
-      - if you are running KDE, Gnome or xfce, xcalc is started after a popup
-      - otherwise, your brower is started and tries to download \"xcalc\"
-
-Note:
-For Linux and Mac, no argument can be given to the command...
-
-EOS
-
-contents.write content,
-  :x => 75, :y => 600, :rendering => Text::Rendering::FILL
-
-page = Page.new.setContents( contents )
-pdf.append_page( page )
-
-pdf.save(OUTPUTFILE)
-puts "PDF file saved as #{OUTPUTFILE}."
-

data/samples/actions/launch/winparams.rb

@@ -1,22 +0,0 @@
-#!/usr/bin/ruby 
-
-begin
-  require 'origami'
-rescue LoadError
-  ORIGAMIDIR = "#{File.dirname(__FILE__)}/../../../lib"
-  $: << ORIGAMIDIR
-  require 'origami'
-end
-include Origami
-
-OUTPUTFILE = "#{File.basename(__FILE__, ".rb")}.pdf"
-
-params = Action::Launch::WindowsLaunchParams.new
-params.F = "C:\\\\WINDOWS\\\\system32\\\\notepad.exe" # application or document to launch
-params.D = "C:\\\\WINDOWS\\\\system32" # new current directory
-params.P = "test.txt" # parameter to pass if F is an application
-
-action = Action::Launch.new
-action.Win = params
-
-PDF.new.onDocumentOpen( action ).save(OUTPUTFILE)

data/samples/actions/loop/loopgoto.rb

@@ -1,24 +0,0 @@
-#!/usr/bin/env ruby
-
-begin
-  require 'origami'
-rescue LoadError
-  ORIGAMIDIR = "#{File.dirname(__FILE__)}/../../../lib"
-  $: << ORIGAMIDIR
-  require 'origami'
-end
-include Origami
-
-pdf = PDF.read("sample.pdf", :verbosity => Parser::VERBOSE_DEBUG )
-
-index = 1
-pages = pdf.pages
-
-pages.each do |page|
-  page.onOpen Action::GoTo Destination::GlobalFit.new pages[index % pages.size]
-
-  index = index + 1
-end
-
-pdf.save("loopgoto_sample.pdf")
-

data/samples/actions/loop/loopnamed.rb

@@ -1,21 +0,0 @@
-#!/usr/bin/env ruby
-
-begin
-  require 'origami'
-rescue LoadError
-  ORIGAMIDIR = "#{File.dirname(__FILE__)}/../../../lib"
-  $: << ORIGAMIDIR
-  require 'origami'
-end
-include Origami
-
-pdf = PDF.read("sample.pdf", :verbosity => Parser::VERBOSE_DEBUG )
-
-pages = pdf.pages
-
-pages.each do |page| 
-  page.onOpen Action::Named::NEXTPAGE  unless page == pages.last
-end
-pages.last.onOpen Action::Named::FIRSTPAGE 
-
-pdf.save("loopnamed_sample.pdf")

data/samples/actions/named/named.rb

@@ -1,31 +0,0 @@
-#!/usr/bin/ruby 
-
-begin
-  require 'origami'
-rescue LoadError
-  ORIGAMIDIR = "#{File.dirname(__FILE__)}/../../../lib"
-  $: << ORIGAMIDIR
-  require 'origami'
-end
-include Origami
-
-OUTPUTFILE = "#{File.basename(__FILE__, ".rb")}.pdf"
-
-puts "Now generating a new PDF file from scratch!"
-
-pdf = PDF.new
-
-page = Page.new
-
-contents = ContentStream.new
-contents.write OUTPUTFILE,
-  :x => 350, :y => 750, :rendering => Text::Rendering::STROKE, :size => 30
-
-page.Contents = contents
-pdf.append_page(page)
-
-pdf.onDocumentOpen Action::Named::PRINT
-
-pdf.save(OUTPUTFILE)
-
-puts "PDF file saved as #{OUTPUTFILE}."