http://lilithlela.cyberguerrilla.org/?p=603

This blog intends to augment USP no. 3: The danger of metadata [digital footprints] (original here) for *nix distros:

In order to modify the dates and times you’ll need to use a hex editor to manually change the data yourself. A simple free hex editor for Windows is called HexEdit (http://www.expertcomsoft.com/download.htm) and will allow you to perform the changes you need to the PDF file that PDF Info and Acrobat don’t allow you to (you can also always open the PDF file in Notepad, but this can take a while and will cause slower computers hang).


Note: The link http://www.expertcomsoft.com/download.htm is no longer leading to anything useful, but that is not a problem. There are many hexeditors available for windows like Hack, Hexplorer and Frhed.

An alternative to using hexedit is using sed, see here (at bottom: the less elegant scrubbing)

For *nix

hexedit is a program that gives the user the ability to view a file in hexadecimal and ASCII view. It offers the ability to read a device as a file. It includes build in key shortcuts to make it fast and easy to edit and analyze file, including skipping to specific memory locations, cutting and pasting, changing views, modes, and syntaxes similar to that of emacsonline manpage on die.net

Note: You can also use vi as a hex editor. It isn't a real 'hex mode', what actually happens is that vi’s buffer is streamed through the external program ‘xxd’, but it works well for some cases of scrubbing.

Open a file in vi as usual, hit escape and to switch into hex mode type:
:%!xxd

And when your done, to exit from hex mode, hit escape again and type:
:%!xxd -r

For MacOS

HexEdit is a Macintosh hexadecimal file editor that handles both data and resource forks. It is the most widely used editor of it's kind on the platform, and can handle file sizes of up to four gigabytes with ease, yet has memory requirements of less than a megabyte (with color turned off). It can compare whole files for similarities or differences and will soon be able to do so for any subset within the files. You can download it from sourceforge.

 

Usage for scrubbing pdf's

Be sure to backup your data before operating any hexedit code.

In general, switch to ASCII mode, turn off "read only" mode, and start searching through the file. For scrubbing pdf's look for "created" (metadata appears in the PDF file more than once). If and when you find metadata, change to fake data or delete. Then repeat your search again for the terms ‘create,’ ‘creation,’ ‘modified,’ and ‘modify,’ and similarly either replace or delete the dates, once again being sure to repeat each search so that any potential multiple instances of the field can be located and modified or blanked out.

 

Views: 879

Replies to This Discussion

Scrubbing pdf metadata with hexedit

same program we used to use hacking DishNet...lol

PS: M$oft Office docs also have this data, thats how "The BTK Killer" Dennis Rader got caught, he was making word docs from the church he worked @ and the meta-data had churches info (addy,phone,etc)

RSS

"Destroying the New World Order"

THANK YOU FOR SUPPORTING THE SITE!

mobile page

12160.info/m

12160 Administrators

 

TOP CONTENT THIS WEEK

Latest Activity

James T. Kirk posted videos
12 minutes ago
JoeG favorited cheeki kea's photo
16 minutes ago
JoeG favorited Maas's photo
17 minutes ago
JoeG favorited Maas's photo
18 minutes ago
Zen One and J. Patriot are now friends
2 hours ago
Chris of the family Masters posted a video

“It is CONTROLLED by The Top of the Pyramid!" DAVID ICKE

Everything has been planned! ►This video was made in collaboration with our partners from London Real Subscribe to their channel here: https://www.youtube.co...
3 hours ago
Chris of the family Masters posted a photo

police-weapons

Australian Policy Enforcers
3 hours ago
Chris of the family Masters posted a blog post
3 hours ago
Chris of the family Masters commented on James Roberts's blog post Trump Is Closing the Fed, Issuing Constitutional Money
"I know someone who believes in Trump closing Fed....."
4 hours ago
Chris of the family Masters favorited James Roberts's blog post Trump Is Closing the Fed, Issuing Constitutional Money
4 hours ago
King Of Cups commented on King Of Cups's group Painted Porch
""You act like mortals in all that you fear, and like immortals in all that you desire."-…"
5 hours ago
King Of Cups commented on King Of Cups's blog post Pondering the corona virus trojan horse while sucking back on a corona beer...
""It's Hard To Envision That": Biden Doubts Democratic National Convention Will Go…"
5 hours ago
King Of Cups commented on King Of Cups's blog post Pondering the corona virus trojan horse while sucking back on a corona beer...
"Coronavirus brings a “Bretton Woods Moment” http://infobrics.org/post/30640/ "What…"
5 hours ago
King Of Cups favorited Sabbatai Zevi's blog post Artificial Scarcity
5 hours ago
King Of Cups commented on King Of Cups's blog post Updated: FEAR INC: Fauci on CNN "200,000 Americans "could" die of coronavirus" see Fauci's recently co-published paper
" Fauci's changes his tune in recently released paper see update at the top of this blog."
5 hours ago
Thorivee left a comment for Central Scrutinizer
"THANK YOU SO MUCH"
6 hours ago
Maas posted photos
6 hours ago
J. Patriot left a comment for Zen One
"Welcome to 12160 Zen! "
6 hours ago
Sabbatai Zevi posted a blog post

Artificial Scarcity

Never, in 21 years in the transportation industry have I seen so many orders for 2-5 pallets of…See More
8 hours ago
stormtruther commented on stormtruther's photo
Thumbnail

Gay lovers find out they are brothers

"Incest is illegal lol,wait till they get to jail, don't be expecting flowers after...."
10 hours ago

© 2020   Created by truth.   Powered by

Badges  |  Report an Issue  |  Terms of Service

content and site copyright 12160.info 2007-2019 - all rights reserved. unless otherwise noted