pdfalyzer 1.14.1__py3-none-any.whl → 1.14.3__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Potentially problematic release.
This version of pdfalyzer might be problematic. Click here for more details.
- CHANGELOG.md +6 -0
- pdfalyzer/config.py +1 -1
- pdfalyzer/detection/yaralyzer_helper.py +1 -0
- {pdfalyzer-1.14.1.dist-info → pdfalyzer-1.14.3.dist-info}/METADATA +4 -4
- {pdfalyzer-1.14.1.dist-info → pdfalyzer-1.14.3.dist-info}/RECORD +8 -8
- {pdfalyzer-1.14.1.dist-info → pdfalyzer-1.14.3.dist-info}/WHEEL +1 -1
- {pdfalyzer-1.14.1.dist-info → pdfalyzer-1.14.3.dist-info}/LICENSE +0 -0
- {pdfalyzer-1.14.1.dist-info → pdfalyzer-1.14.3.dist-info}/entry_points.txt +0 -0
CHANGELOG.md
CHANGED
pdfalyzer/config.py
CHANGED
|
@@ -29,7 +29,7 @@ class PdfalyzerConfig:
|
|
|
29
29
|
PDF_PARSER_EXECUTABLE = None
|
|
30
30
|
|
|
31
31
|
@classmethod
|
|
32
|
-
def get_output_basepath(cls, export_method):
|
|
32
|
+
def get_output_basepath(cls, export_method: str) -> str:
|
|
33
33
|
"""Build the path to an output file - everything but the extension"""
|
|
34
34
|
export_type = export_method.__name__.removeprefix('print_')
|
|
35
35
|
output_basename = f"{cls._args.output_basename}.{export_type}"
|
|
@@ -25,6 +25,7 @@ def get_bytes_yaralyzer(scannable: bytes, label: str) -> Yaralyzer:
|
|
|
25
25
|
|
|
26
26
|
|
|
27
27
|
def _build_yaralyzer(scannable: Union[bytes, str], label: Optional[str] = None) -> Yaralyzer:
|
|
28
|
+
"""Build a yaralyzer for .yara rules files stored in the yara_rules/ dir in this package."""
|
|
28
29
|
# TODO: ugh this sucks (handling to extract .yara files from a python pkg zip)
|
|
29
30
|
with as_file(YARA_RULES_DIR.joinpath(YARA_RULES_FILES[0])) as yara0:
|
|
30
31
|
with as_file(YARA_RULES_DIR.joinpath(YARA_RULES_FILES[1])) as yara1:
|
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
Metadata-Version: 2.1
|
|
2
2
|
Name: pdfalyzer
|
|
3
|
-
Version: 1.14.
|
|
3
|
+
Version: 1.14.3
|
|
4
4
|
Summary: A PDF analysis toolkit. Scan a PDF with relevant YARA rules, visualize its inner tree-like data structure in living color (lots of colors), force decodes of suspicious font binaries, and more.
|
|
5
5
|
Home-page: https://github.com/michelcrypt4d4mus/pdfalyzer
|
|
6
6
|
License: GPL-3.0-or-later
|
|
@@ -23,14 +23,14 @@ Requires-Dist: chardet (>=5.0.0,<6.0.0)
|
|
|
23
23
|
Requires-Dist: python-dotenv (>=0.21.0,<0.22.0)
|
|
24
24
|
Requires-Dist: rich (>=12.5.1,<13.0.0)
|
|
25
25
|
Requires-Dist: rich-argparse-plus (>=0.3.1,<0.4.0)
|
|
26
|
-
Requires-Dist: yaralyzer (>=0.9.
|
|
26
|
+
Requires-Dist: yaralyzer (>=0.9.3,<0.10.0)
|
|
27
27
|
Project-URL: Documentation, https://github.com/michelcrypt4d4mus/pdfalyzer
|
|
28
28
|
Project-URL: Repository, https://github.com/michelcrypt4d4mus/pdfalyzer
|
|
29
29
|
Description-Content-Type: text/markdown
|
|
30
30
|
|
|
31
|
-
<!-- 
|
|
31
|
+
<!--  -->
|
|
32
32
|

|
|
33
|
-

|
|
34
34
|

|
|
35
35
|
|
|
36
36
|
|
|
@@ -1,9 +1,9 @@
|
|
|
1
|
-
CHANGELOG.md,sha256=
|
|
1
|
+
CHANGELOG.md,sha256=cRKp98qkYX_R16cGGwYa8N8XTNCcTNiWJ2DYgbDqFCg,10397
|
|
2
2
|
LICENSE,sha256=OXLcl0T2SZ8Pmy2_dmlvKuetivmyPd5m1q-Gyd-zaYY,35149
|
|
3
3
|
pdfalyzer/__init__.py,sha256=9yUk9qcFX1QJuFtNTmsvZXQ6is8_8FGOz2DR1xjp-Rc,3183
|
|
4
4
|
pdfalyzer/__main__.py,sha256=BbptbheuoXCp6WRPqEY6Qc9XaF7MCcTahSz-X1Zbh0A,42
|
|
5
5
|
pdfalyzer/binary/binary_scanner.py,sha256=iZN0vrqBFgADR3ACGY5SE9wAcQcNs0hlGgrMg1530sg,10121
|
|
6
|
-
pdfalyzer/config.py,sha256=
|
|
6
|
+
pdfalyzer/config.py,sha256=oN-pVR037lt3giRsnsm4c8ku5hCW8ChFqYFi9V7w1qU,1918
|
|
7
7
|
pdfalyzer/decorators/document_model_printer.py,sha256=AIrEGCf1_WyJiog1l7WLJR3uS8Bb2J_LO5gW8OsnesA,2643
|
|
8
8
|
pdfalyzer/decorators/indeterminate_node.py,sha256=f9Us3Vpr7DIA7PUEvLoMSurRyWySFTiT6Pyjt120PRs,6449
|
|
9
9
|
pdfalyzer/decorators/pdf_object_properties.py,sha256=_RxY-P4CeDYRnq3GDv4su5CIAvCaJhbtBNoOj0ZD13g,5568
|
|
@@ -12,7 +12,7 @@ pdfalyzer/decorators/pdf_tree_verifier.py,sha256=pk0NysYt8PxsKh532IfNSrcoHpdb-wU
|
|
|
12
12
|
pdfalyzer/detection/constants/binary_regexes.py,sha256=rcgQ984q6a8CFvV2QX4-asuqT5w_aH8LPqoN2N13eOM,1665
|
|
13
13
|
pdfalyzer/detection/constants/javascript_reserved_keywords.py,sha256=CXXdWskdQa0Hs5wCci2RBVvipgZg34_cLfmkWG4Xcmg,991
|
|
14
14
|
pdfalyzer/detection/javascript_hunter.py,sha256=HkgJmVHu4W-xZ1Km7ScW3QQKrei7VIQ4M3CEZsOiCE4,775
|
|
15
|
-
pdfalyzer/detection/yaralyzer_helper.py,sha256=
|
|
15
|
+
pdfalyzer/detection/yaralyzer_helper.py,sha256=4EdsmmxD7HwBTFcYROg5udpkKpkJAiKSz_EwcFJKe-g,1286
|
|
16
16
|
pdfalyzer/font_info.py,sha256=L5ykKvlifAQv2uw-pKqxbQPqWrvbli0IcO8DgDK0SQo,6665
|
|
17
17
|
pdfalyzer/helpers/dict_helper.py,sha256=2TP0_EJBouaWD6jfnAekrEZ4M5eHKL8Tm61FgXZtBAg,303
|
|
18
18
|
pdfalyzer/helpers/number_helper.py,sha256=KFl7GSTyhrBYOKBlItQbVFGfVw9NfFtt7Wdwr8oN0dY,235
|
|
@@ -40,8 +40,8 @@ pdfalyzer/yara_rules/PDF.yara,sha256=HLoVaF3HvBDBAnKmfv7__8xm-EgUDx2eYDrb7JdJ4Ik
|
|
|
40
40
|
pdfalyzer/yara_rules/PDF_binary_stream.yara,sha256=oWRPLe5yQiRFMvi3BTHNTlB6T7NcAuxKn0C9OSvgJSM,804
|
|
41
41
|
pdfalyzer/yara_rules/__init.py__,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
|
|
42
42
|
pdfalyzer/yara_rules/lprat.static_file_analysis.yara,sha256=i0CwRH8pBx_QshKFTQtr1CP5n378EZelsF2FxMY2y5A,21859
|
|
43
|
-
pdfalyzer-1.14.
|
|
44
|
-
pdfalyzer-1.14.
|
|
45
|
-
pdfalyzer-1.14.
|
|
46
|
-
pdfalyzer-1.14.
|
|
47
|
-
pdfalyzer-1.14.
|
|
43
|
+
pdfalyzer-1.14.3.dist-info/LICENSE,sha256=OXLcl0T2SZ8Pmy2_dmlvKuetivmyPd5m1q-Gyd-zaYY,35149
|
|
44
|
+
pdfalyzer-1.14.3.dist-info/METADATA,sha256=hTeX0SglgFZNB1RnDCtSd6aTPQBXuZ40-Qq7brulBG0,24008
|
|
45
|
+
pdfalyzer-1.14.3.dist-info/WHEEL,sha256=7Z8_27uaHI_UZAc4Uox4PpBhQ9Y5_modZXWMxtUi4NU,88
|
|
46
|
+
pdfalyzer-1.14.3.dist-info/entry_points.txt,sha256=rl7OpBvxSNmV90rjTPCjhXTtjRMqZxHUAQfP0Cdmt1Y,111
|
|
47
|
+
pdfalyzer-1.14.3.dist-info/RECORD,,
|
|
File without changes
|
|
File without changes
|