Peepdf is developed and maintained by Jose Miguel Esparza, and it's a great tool to investigate PDFs' suspicious elements. It also has an interactive console mode, with the ability to analyse JavaScript and shellcode. In this blog post we take steps to analyse a sample file in the cincan tools repository. peepdf is a Python tool that analyzes PDF files to find out if the file is harmful or not. The goal of peepdf is to equip all the required components that a penetration tester needs in a PDF analysis. peepdf helps us to see all the objects in the document and shows the suspicious elements. It also supports the most commonly used filters and That's correct. What about it though? Perhaps would be good to include this information in the README. Personally I only use peepdf in the context of Cuckoo Sandbox and in that case those setup steps are documented in the Cuckoo documentation hehe. Feel free to PR on our fork. mpeepdf is a modified version of peepdf. mpeepdf is a Python tool to explore PDF files which provides security analysts and researcher a single powerful platform to investigate PDF. The ultimate goal of (m)peepdf is to provide a unique, all-you-need framework for security researchers and analysts to investigate a PDF file. # peepdf is free software: you can redistribute it and/or modify # it under the terms of the GNU General Public License as published by # the Free Software Foundation, either version 3 of the License, or # (at your option) any later version. # # peepdf is distributed in the hope that it will be useful,