Preliminary research

Evil Font Labs: cross-format glyph-remapping deception

DoctorEww/EvilFontTool: labs/README.md

DoctorEww · GitHub

AI-collected research leads through 1 October 2026, including a bounded September review of selected social and community sources. Unranked, incomplete, not community-vetted, and subject to change.

Five DEF CON 34 exercises teach how remapped glyphs make visible text differ from copied or extracted text in HTML, DOCX and PDF. The labs cover JavaScript-free ClickFix deception, document-security and AI-review mismatches, portable setup-guide payloads, and open-ended design work, with platform and rendering prerequisites stated.

Record

Document

DoctorEww/EvilFontTool: labs/README.md

Researcher

DoctorEww

Published by

GitHub

Format

Code

Topic

Other

In the archive

• Collected in the 2026 preliminary research sweep

Related sources

• EvilFontTool: cross-format glyph-remapping deception labs Repository
• EvilFontTool — Demos

Tags

• tooling
• phishing
• clipboard
• prompt-injection
• pdf
• owasp-a03-2021
• owasp-a04-2021

This page is the archive's own catalogue record. The research is the work of DoctorEww, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on 1 October 2026.