DidierStevensSuite VS PyPDF2

Didier Stevens is a famous security researcher, but his instructions on how to scan pdf's require the terminal & many commands. I am hostile to this in general as I think it can all be implemented in a simple one click scan tool, instead. Which is what I am looking for. Here are all his relevant links & antivirus/anti-malware projects & tutorials: https://github.com/DidierStevens/DidierStevensSuite

This tool was built to fill a gap in the PDF assessment landscape. Didier Stevens's pdfid.py and pdf-parser.py are still the best game in town when it comes to PDF analysis tools but they lack in the visualization department and also don't give you much to work with as far as giving you a data model you can write your own code around. Peepdf seemed promising but turned out to be in a buggy, out of date, and more or less unfixable state. And neither of them offered much in the way of tooling for embedded binary analysis. Thus I felt the world might be slightly improved if I strung together a couple of more stable/well known/actively maintained open source projects (AnyTree, PyPDF2, and Rich) into this tool.

OK then. So I won't accidentally miss any, I've made a little script to find them. It uses oledump.py which, as the name suggests is a Python script to dump OLE files. Here is oledump.py on Github. Excel stores its macros in an OLE file names xl/vbaProject.bin inside the .xlsm file, and oledump knows how to find that, list the streams in them, and extract the macros from the streams that contain them.

You can install emldump and programmatically extract all attachments

Didier Stevens Suite - He has a tool for everything.

I still haven't needed to do that part in Rust yet, unfortunately. My mother is still using the pypdf-based concatenator I wrote for her years ago.

I did an extremely quick search and am linking this without knowing anything about it.

Pretty much study Python until this Github repo'd Readme makes sense!: https://github.com/py-pdf/PyPDF2

As other posters have said, if you're just generating PDFs, that's doable with minor library support. If you want to open existing PDFs and do anything non-trivial with them, you'll want a mature, powerful PDF parsing library. PDFKit, which is part of macOS is pretty amazing. If you need portability, something like Python's PyPDF2 is probably the best bet. Knowing the Rust community, though, we'll probably get a library at least as good in Rust in a surprisingly short amount of time.

Why are you using PyPDF4 which seems to have no active maintainer and no documentation instead of PyPDF2 which has both?

one of many options

Feel free. I poked around the PyPDF2 code and it seems like reading signatures is something it supports via xfa_form property (GitHub issue where this was discussed; seems to have been closed v. recently) . would probably be a very simple PR provided you knew where to look for that property.