Activity for PJScan

  • Nedim Srndic Nedim Srndic posted a comment on discussion Pjscan questions

    Dear Saeed, It may be that PJScan cannot extract JavaScript from the files you have. There is a known limitation of extracting JavaScript from Adobe XFA forms in PJScan. In that case there is not much I can help with because I don't have time for maintenance anymore. However, in the paper "Extract Me If You Can: Abusing PDF Parsers in Malware Detectors" by Carmony et al. they extended PJScan to get this JavaScript, you can ask for code. I'm unaware of any PJScan model available for download. I regret...

  • Anonymous posted a comment on discussion Pjscan questions

    Hi, I'm having a trouble in the learning phase. I used a set of ~11000 malicious PDF files from Contagiodump to train the model however, I get the following error: Learner: There seem to be no JavaScript scripts in any of the PDF files, or the scripts are too short. Unable to learn. I'm sure that at least some of the files have JavaScript in them, if not all. Is there any sample model file I can use? Best Regards, Saeed

  • Nedim Srndic Nedim Srndic posted a comment on discussion Pjscan questions

    Please install the stem library that is included in the PJScan repository. In the PJScan INSTALL file, you see it listed as a prerequisite, along with other libraries that are included. For installation instructions, please see the INSTALL files of the respective libraries.

  • Anonymous posted a comment on discussion Pjscan questions

    I am trying to in stall PJScan on ubuntu 10.10 64 bit, by following the instruction contained in the "install" file. I installed all the prerequsites, and when I try to push "cmake -DCMAKE_BUILD_TYPE=Release .." on the command line it shows the followinw error: "does not appear to contain CMakeLists.txt". So I then moved the created build folder into the internally pjscan folder, and then I repeated the command, now it will start executing until another error appear: "CMake Error at CMakeLists.txt:26...

  • Nedim Srndic Nedim Srndic posted a comment on discussion Pjscan questions

    It is hard to get this kind of data. You can try to reach out to some members of...

  • kevintrai kevintrai posted a comment on discussion Pjscan questions

    Thanks Nedim. you were correct. I got the install up and running. I tested it on...

  • Nedim Srndic Nedim Srndic posted a comment on discussion Pjscan questions

    Missing support for "long long" is not an error but a warning. The error is in line...

  • Anonymous posted a comment on discussion Pjscan questions

    Thanks for all your work on PJScan. This sounds like a great tool and I'd love to...

  • Nedim Srndic Nedim Srndic posted a comment on discussion Pjscan questions

    We didn't include the extra features in the final code because our experiments show...

  • Anonymous posted a comment on discussion Pjscan questions

    I am unable to find your extra defined tokens which indicate malicious JS entites...

  • Nedim Srndic Nedim Srndic posted a comment on discussion Pjscan questions

    I'm lacking time to do it. The software is relatively popular and I'm pretty sure...

  • Anonymous posted a comment on discussion Pjscan questions

    Hi, I was wondering if you have been able to get this software to work on Ubuntu...

  • Nedim Srndic Nedim Srndic posted a comment on discussion Pjscan questions

    Hello, PJScan has only been tested on 64-bit Ubuntu 10.10 and 11.04. There were changes...

  • Suleiman Suleiman posted a comment on discussion Pjscan questions

    I install pjscan on ubuntu 14.04 and I got the following error /usr/include/poppler/goo/gtypes.h:28:28:...

1