Web Hack List

Collected research

Backdooring PDF Files

David Kierznowski backdoors PDFs through Adobe's own JavaScript model, attaching code to the Page Open event. One variant silently launches a URL in the browser with no warning from Reader 6 or 7; the other uses ADBC to enumerate Windows ODBC data sources and ships the list out over a SOAP web service request.

Record

Researcher
David Kierznowski
Published by
michaeldaw.org
Topic
Other

In the archive

Tags

This page is the archive's own catalogue record. The research is the work of David Kierznowski, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .