PDF.js viewer

Welcome to the PDF.js-based PDF analyzer

(You can also use the open button in the toolbar of PDF.js to select a file.)

The file will be loaded (with script execution disabled) and some analysis information will be shown here.

Links are currently not defanged, watch your clicks!

Note: This tool tries to keep you safe by loading the PDF inside the JavaScript sandbox using PDF.js. However, your browser can still be exposed to some data from the PDF (e.g. images, fonts). The analysis focuses on attachments, scripts, links, and annotations. It will not detect e.g. image-based or font-based exploits, suspicious/malicious stream structures, XFA details, some non-JS open actions (including the launch action!), and files embedded via AdditionalStreams (e.g. LibreOffice hybrid docs). It also relies on how PDF.js interprets the file. Since PDF is an extremely complicated format, it is possible to craft files that will be interpreted differently by different software. For low-level analysis, try e.g. https://blog.didierstevens.com/programs/pdf-tools/ or https://github.com/michelcrypt4d4mus/pdfalyzer.

Based on Mozilla's PDF.js, licensed under Apache 2.0. Uses vue.js, licensed under the MIT license.

To download attachments, use the sidebar in PDF.js (you may need to view the corresponding page)

{{a.data.length}} bytes, {{a.hash}}

Action "{{action}}" on {{Array.from(moreInfo.keys()).join('/')}}

{{code}}

No processing errors

You may still want to check the console for PDF.js output.

No attachments found

(neither on the document itself not in annotations)

No scripts found

No external links found

No other unusual/suspicious annotations found

This tool only checks for the categories listead above and will NOT detect e.g. image-based or font-based exploits, suspicious/malicious stream structures, XFA details, some non-JS open actions (including the launch action!), and files embedded via AdditionalStreams (e.g. LibreOffice hybrid docs). For low-level analysis, try e.g. https://blog.didierstevens.com/programs/pdf-tools/ or https://github.com/michelcrypt4d4mus/pdfalyzer.

This tool also relies on how PDF.js interprets the file. Since PDF is an extremely complicated format, it is possible to craft files that will be interpreted differently by different software.

For document metadata/properties, check the top right menu of the PDF.js toolbar.

Based on Mozilla's PDF.js, licensed under Apache 2.0. Uses vue.js, licensed under the MIT license.