http://lilithlela.cyberguerrilla.org/?p=603

This blog intends to augment USP no. 3: The danger of metadata [digital footprints] (original here) for *nix distros:

In order to modify the dates and times you’ll need to use a hex editor to manually change the data yourself. A simple free hex editor for Windows is called HexEdit (http://www.expertcomsoft.com/download.htm) and will allow you to perform the changes you need to the PDF file that PDF Info and Acrobat don’t allow you to (you can also always open the PDF file in Notepad, but this can take a while and will cause slower computers hang).


Note: The link http://www.expertcomsoft.com/download.htm is no longer leading to anything useful, but that is not a problem. There are many hexeditors available for windows like Hack, Hexplorer and Frhed.

An alternative to using hexedit is using sed, see here (at bottom: the less elegant scrubbing)

For *nix

hexedit is a program that gives the user the ability to view a file in hexadecimal and ASCII view. It offers the ability to read a device as a file. It includes build in key shortcuts to make it fast and easy to edit and analyze file, including skipping to specific memory locations, cutting and pasting, changing views, modes, and syntaxes similar to that of emacsonline manpage on die.net

Note: You can also use vi as a hex editor. It isn't a real 'hex mode', what actually happens is that vi’s buffer is streamed through the external program ‘xxd’, but it works well for some cases of scrubbing.

Open a file in vi as usual, hit escape and to switch into hex mode type:
:%!xxd

And when your done, to exit from hex mode, hit escape again and type:
:%!xxd -r

For MacOS

HexEdit is a Macintosh hexadecimal file editor that handles both data and resource forks. It is the most widely used editor of it's kind on the platform, and can handle file sizes of up to four gigabytes with ease, yet has memory requirements of less than a megabyte (with color turned off). It can compare whole files for similarities or differences and will soon be able to do so for any subset within the files. You can download it from sourceforge.

 

Usage for scrubbing pdf's

Be sure to backup your data before operating any hexedit code.

In general, switch to ASCII mode, turn off "read only" mode, and start searching through the file. For scrubbing pdf's look for "created" (metadata appears in the PDF file more than once). If and when you find metadata, change to fake data or delete. Then repeat your search again for the terms ‘create,’ ‘creation,’ ‘modified,’ and ‘modify,’ and similarly either replace or delete the dates, once again being sure to repeat each search so that any potential multiple instances of the field can be located and modified or blanked out.

 

Views: 914

Replies to This Discussion

Scrubbing pdf metadata with hexedit

same program we used to use hacking DishNet...lol

PS: M$oft Office docs also have this data, thats how "The BTK Killer" Dennis Rader got caught, he was making word docs from the church he worked @ and the meta-data had churches info (addy,phone,etc)

RSS

"Destroying the New World Order"

TOP CONTENT THIS WEEK

THANK YOU FOR SUPPORTING THE SITE!

mobile page

12160.info/m

12160 Administrators

 

Latest Activity

John Miller commented on rlionhearted_3's photo
Thumbnail

Another incredibly Stupid!! What, no mirrors?

"Brutal post... not sure it’s helping anyone though."
15 minutes ago
John Miller replied to cheeki kea's discussion Tartaria
"Tartaria: the empire that built half the world's cathedrals, then vanished because someone…"
16 minutes ago
Burbia commented on rlionhearted_3's photo
Thumbnail

Another incredibly Stupid!! What, no mirrors?

"This movie portrayed plastic surgery as absurd. I guess the numbers in the real world are growing."
16 hours ago
Burbia commented on tjdavis's photo
Thumbnail

Redux

"Ah yes, General Jussitri Smolletkov. Good tongzhi. Good tongzhi."
17 hours ago
Doc Vega posted a blog post

Unusual Discoveries and Headlines

Archaeologists have discovered an ancient tool dated to be 6,000 years old, but even more…See More
yesterday
tjdavis posted a video

Inside Texas HOMELESS HELL – Even Cops Don't Dare Step In! - Documentary

In this powerful documentary, we explore the escalating Texas homeless crisis 2025, where cities and rural areas alike are witnessing a disturbing rise in th...
yesterday
tjdavis posted a photo
yesterday
John Miller replied to MAC's discussion BREAKING! UFO whistleblowers drop BOMBSHELL on D.C. | Redacted with Natali and Clayton Morris
"Crazy how these whistleblower stories are finally making it into bigger conversations. Makes you…"
Sunday
Burbia favorited tjdavis's blog post The Dems Love Their Demons
Sunday
John Miller commented on tjdavis's photo
Thumbnail

Comprehensive Coverage

"That car needs an exorcism, not an oil change."
Saturday
John Miller commented on tjdavis's blog post The Dems Love Their Demons
"If the Dems are dating demons, then that AI romance shoot was basically engagement photos."
Saturday
John Miller replied to cheeki kea's discussion Would-Be Trump Assassin Ryan Routh Gave Many Interviews with Mainstream Media
"Wouldn't be surprised if there's a whole lot more buried under the surface here."
Saturday
Less Prone favorited rlionhearted_3's photo
Saturday
Less Prone left a comment for John Miller
"Welcome John."
Saturday
Doc Vega posted a blog post

The Saga of Ape Canyon Revisited

 In the years that I’d written for the Plano Star Courier I got several invitations to go on…See More
Saturday
John Miller is now a member of 12160 Social Network
Saturday
Less Prone favorited tjdavis's photo
Saturday
tjdavis posted a photo
Saturday
Burbia posted a video

The lIIumlnatl Stallions: MethyIene Bluecifer & Mind-Control Horses [ FULL DOCUMENTARY ]

🐴🦄🐸 Get the NEW "lIIumlnatl Animal Coloring Book!" 🐴🦄🐸NOW AVAILABLE ON AMAZON - CLICK HERE: https://amzn.to/3SYgAkC🔑 Get MORE Access to the Secret Vid...
Saturday
Doc Vega commented on Doc Vega's blog post Memorial Weekend Getaway Horror Story
"Less Prone thanks for your support Buddy! "
Friday

© 2025   Created by truth.   Powered by

Badges  |  Report an Issue  |  Terms of Service

content and site copyright 12160.info 2007-2019 - all rights reserved. unless otherwise noted