http://lilithlela.cyberguerrilla.org/?p=603

This blog intends to augment USP no. 3: The danger of metadata [digital footprints] (original here) for *nix distros:

In order to modify the dates and times you’ll need to use a hex editor to manually change the data yourself. A simple free hex editor for Windows is called HexEdit (http://www.expertcomsoft.com/download.htm) and will allow you to perform the changes you need to the PDF file that PDF Info and Acrobat don’t allow you to (you can also always open the PDF file in Notepad, but this can take a while and will cause slower computers hang).


Note: The link http://www.expertcomsoft.com/download.htm is no longer leading to anything useful, but that is not a problem. There are many hexeditors available for windows like Hack, Hexplorer and Frhed.

An alternative to using hexedit is using sed, see here (at bottom: the less elegant scrubbing)

For *nix

hexedit is a program that gives the user the ability to view a file in hexadecimal and ASCII view. It offers the ability to read a device as a file. It includes build in key shortcuts to make it fast and easy to edit and analyze file, including skipping to specific memory locations, cutting and pasting, changing views, modes, and syntaxes similar to that of emacsonline manpage on die.net

Note: You can also use vi as a hex editor. It isn't a real 'hex mode', what actually happens is that vi’s buffer is streamed through the external program ‘xxd’, but it works well for some cases of scrubbing.

Open a file in vi as usual, hit escape and to switch into hex mode type:
:%!xxd

And when your done, to exit from hex mode, hit escape again and type:
:%!xxd -r

For MacOS

HexEdit is a Macintosh hexadecimal file editor that handles both data and resource forks. It is the most widely used editor of it's kind on the platform, and can handle file sizes of up to four gigabytes with ease, yet has memory requirements of less than a megabyte (with color turned off). It can compare whole files for similarities or differences and will soon be able to do so for any subset within the files. You can download it from sourceforge.

 

Usage for scrubbing pdf's

Be sure to backup your data before operating any hexedit code.

In general, switch to ASCII mode, turn off "read only" mode, and start searching through the file. For scrubbing pdf's look for "created" (metadata appears in the PDF file more than once). If and when you find metadata, change to fake data or delete. Then repeat your search again for the terms ‘create,’ ‘creation,’ ‘modified,’ and ‘modify,’ and similarly either replace or delete the dates, once again being sure to repeat each search so that any potential multiple instances of the field can be located and modified or blanked out.

 

Views: 900

Replies to This Discussion

Scrubbing pdf metadata with hexedit

same program we used to use hacking DishNet...lol

PS: M$oft Office docs also have this data, thats how "The BTK Killer" Dennis Rader got caught, he was making word docs from the church he worked @ and the meta-data had churches info (addy,phone,etc)

RSS

"Destroying the New World Order"

TOP CONTENT THIS WEEK

THANK YOU FOR SUPPORTING THE SITE!

mobile page

12160.info/m

12160 Administrators

 

Latest Activity

Doc Vega posted a blog post

While the Wounds Are Still Fresh

 In this age of lies Love has become a sad compromise The source of my emotional demiseAll the…See More
14 hours ago
Doc Vega's 4 blog posts were featured
15 hours ago
Larry Harmen's blog post was featured

China has weaponized Ebola to take over North America after WW3

The Defense Minister with his own Mouth has said it.…See More
15 hours ago
tjdavis's blog post was featured
15 hours ago
FREEDOMROX's blog post was featured
15 hours ago
Less Prone favorited Doc Vega's blog post Countdown to WWIII ? You be the Judge as the Media Hides the Developments of the Democrats
15 hours ago
Doc Vega posted a photo
yesterday
Doc Vega posted a blog post

My Twisted Destiny

My Twisted Destiny Darling why don't you come and play with meOn a planetary seaOn a frozen moon we…See More
yesterday
tjdavis posted a photo
Friday
tjdavis posted a video

David⚡️Bowie - Ricochet documentary (1984)

In December 1983, David Bowie's massive 'Serious Moonlight ' tour arrived in Asia for three shows in Hong Kong, Bangkok and Singapore, virtually uncharted te...
Friday
rlionhearted_3 posted a status
"12 units gone, 6 units heavily damaged, 6 units saved, including mine, been a stressful 10 days!"
Thursday
rlionhearted_3 posted a status
"The apartment building I live in caught fire. 12 of 24 units are a total loss, 6 units have fire smoke and water damage. 6 units were spared"
Thursday
rlionhearted_3 posted photos
Thursday
Less Prone posted a video

THE FALL OF AMERICA

Gerald Celente discusses the retail sales report and what it means for the economy. He also talks about how politicians ruined the American Dream...To access...
Thursday
Larry Harmen commented on Larry Harmen's video
Thumbnail

"Antichrist and the Crowned 666 King Charles ( Dr. Bruce Ruisi)

"King Charles Family are Related to my Family the Harmen's and they are all Masons ...Military…"
Thursday
Larry Harmen posted a video

"Antichrist and the Crowned 666 King" | RAPTURE ALERT!!! (w/ Dr. Bruce Ruisi)

Has the antichrist been identified??? The overwhelming biblical proof will shock you! "Antichrist and the Crowned 666 King: RAPTURE ALERT!!!", Dr. Bruce Rui...
Thursday
Doc Vega commented on Larry Harmen's blog post China has weaponized Ebola to take over North America after WW3
"The Chinese have had an ambition for a long time to occupy the US and they're pretty…"
Wednesday
Doc Vega posted blog posts
Wednesday
cheeki kea commented on Doc Vega's blog post A New Angle on Explanation of UAP’s
"Good question Doc V. It's the Air Force that carried out this (underhanded) action according…"
Tuesday
Doc Vega commented on Doc Vega's blog post A New Angle on Explanation of UAP’s
"cheeki kea Barium is a radioactive isotope that was once used for X-ray purposes in the patient.…"
Monday

© 2024   Created by truth.   Powered by

Badges  |  Report an Issue  |  Terms of Service

content and site copyright 12160.info 2007-2019 - all rights reserved. unless otherwise noted