ArrayKit

PDF Sanitizer

Dekhiye ki anjaan bhejne wale ki PDF kya chala sakti hai, use hataiye, phir save ki gayi copy dobara paDhkar sabit kijiye ki wo saaf hai.

PDF Sanitizer

Dekhiye ki anjaan bhejne wale ki PDF kya chala sakti hai, use hataiye, phir save ki gayi copy dobara paDhkar sabit kijiye ki wo saaf hai.

Jis document par aapko bharosa nahin wo isi tab ke andar paDha, saaf aur dobara jaancha jaata hai, use kabhi kisi reader mein khola nahin jaata aur kahin bheja nahin jaata. Scripts sirf text ki tarah dekhi jaati hain, unhe kabhi chalaya nahin jaata.

Dekhiye document aapke baare mein kya kholta hai

PDF Sanitizer ke baare mein

PDF jitna page hai utna hi ek chhota program bhi. Usme wo script ho sakti hai jo document khulte hi chal jaati hai, wo action jo machine par doosra program shuru kar de, wo button jo bhara hua form author ke chune pate par bhej de, poora executable attachment ke roop mein embed kiya hua, aur ek XML form parat jiski apni scripting hoti hai. Jahan bhi koi action baith sakta hai, wahan yahan jaaya jaata hai — open action, document, page, annotation aur form-field triggers, bookmarks, document-level script tree — aur chains ant tak follow ki jaati hain, isliye wo bekhatar pehla kadam bhi pakDa jaata hai jiske peeche launch action qatar mein laga ho. Har finding batati hai ki wo kahan rehti hai, kispar point karti hai, aur use click chahiye ya nahin. Chuniye kya jaaye, aur dobara likhi gayi copy apne hi bytes se paDhi jaakar phir scan ki jaati hai.

Features

  • Das categories, high, medium aur low mein baanti hui, high aur medium shuru se tick
  • Har finding dikhati hai ki wo kahan baithi hai, kispar nishana hai aur wo bina click chalti hai ya nahin
  • Action chains ant tak follow ki jaati hain, isliye kuch bhi seedhe-saade pehle kadam ke peeche chhup nahin sakta
  • Program jaise naam wali embed ki gayi files aam attachments se alag list hoti hain
  • File ke bytes par ek kaccha keyword pass, jo #xx escapes se chhupaye gaye naam bhi khol deta hai
  • Saaf ki gayi copy dobara load hoti aur dobara scan hoti hai, aur saaf ka nishan tab hi milta hai jab kuch na bache
  • Ek saath kai PDF, ek-ek karke ya saath ZIP mein download
  • Har hataane se kya badlega uski warning, jaise wo form jo hisaab lagana band kar deta hai

PDF Sanitizer kaise use karein

  1. Ek ya zyada PDF drop kijiye; aate hi har ek paDhi aur scan ki jaati hai
  2. Findings par kaam kijiye, aur doosri raay chahiye to kacche keyword counts kholiye
  3. Jo rakhna hai uska tick hataiye — web links aur metadata bina tick shuru hote hain
  4. Sanitize kijiye, dobara kiya scan paDhiye, aur saaf copies download kijiye

Example

Input

invoice_urgent.pdf — unexpected, from a sender nobody recognises

Output

6 findings: 2 scripts that run on opening, 1 launch action, 1 attachment named invoice.pdf.exe, 1 web link, document information · after sanitizing, the re-scan is clean

Dono scripts document khulte hi chal gaye, bina kisi click ke.

Common errors aur troubleshooting

  • Sanitize karne ke baad form jod lagana band kar diya. — Uske total script se nikalte the, aur scripts ja chuki hain. Agar hisaab sach mein chahiye to JavaScript ka tick hatakar dobara chalaiye, yeh jaante hue ki hamla le jaane ke liye sabse zyada isi category ka istemaal hota hai.
  • Encrypted PDF scan hui par saaf kabhi nahin hui. — Password se surakshit file khulne se pehle dobara likhi nahin ja sakti. Pehle Decrypt PDF se password hataiye, phir nateeja yahan wapas laaiye.
  • Keyword table un naamon ko list karti hai jo findings nahin karti. — Dono alag sawaal ka jawab dete hain. Keyword pass kacche bytes mein naam ginta hai, un objects ke bhi jinpar kuch point nahin karta; findings sirf wahi hain jahan document sach mein pahunchta hai.
  • Form ab “Please wait…” wala page dikhata hai aur kuch nahin. — Poora form XFA parat mein rehta tha aur saamanya pages sirf wahi placeholder the. Agar form bharna zaroori hai to XFA parat rakhiye — aur usse savdhan rahiye, kyunki wo bhi scripting le jaata hai.

Aksar pooche jaane wale sawaal

PDF mein active content kis-kis ko ginaa jaata hai?
Jo kuch dikhaane ki jagah kuch karta hai: scripts, khulne, band hone, save ya print karne par chalne wale triggers, wo actions jo program launch karte ya form submit karte hain, wo links jo doosri file kholte hain, embed ki gayi files, XFA form parat, aur rich media ya 3D objects.
Kya PDF sach mein kholte hi kuch chala sakti hai?
Wo koshish kar sakti hai. Open action aur document aur page triggers bina kisi click ke chal jaate hain, aur isi wajah se unhe yahan alag gina jaata hai. Reader maanta hai ya nahin yeh uski settings par depend karta hai, par nirdesh file mein to hai hi.
Kya JavaScript hataane se document ka form toot jaayega?
Toot sakta hai. Total lagana, date aur number format karna, aur aapne jo likha use jaanchna — sab scripts ka kaam hai, isliye wo sab rukh jaata hai. Fields khud aur pehle bhara hua sab bina chhede rehta hai, aur yeh sauda aage baDhne se pehle saaf-saaf bataya jaata hai.
Saaf ki gayi copy sach mein saaf hai, yeh kaise pata chalega?
Kyunki use bharose par nahin liya jaata. Dobara likhe bytes ek nayi document ki tarah phir load hote hain aur shuru se scan hote hain, aur saaf ka nishan sirf us file ko milta hai jiske doosre scan mein kuch nahin milta. Aap jo numbers dekhte hain wahi doosri paDhat hai.
.exe naam wale attachment ko baaki attachments se alag kyun maana jaata hai?
Kyunki use kholna code chalata hai, jo koi spreadsheet ya image nahin karti. Jo bhi chalne wale extension par khatam hota hai — .exe, .js, .bat, .ps1, .vbs aur do darjan aur — use medium ki jagah high maana jaata hai aur alag list kiya jaata hai.
Kya sanitize karne se pages ka dikhna badalta hai?
Nahin. Page content ko chheda nahin jaata, isliye text, artwork aur layout waise hi paar utarte hain. Jo gayab hota hai wo vyavhaar hai: jin multimedia players aur links ke paas karne layak kuch nahin bachta wo hata diye jaate hain, aur metadata sirf tab jaata hai jab aap kahein.

Related tools

  • PDF privacy scanner — PDF mein chhupe metadata aur personal data dhoondein.
  • PDF Attachments — PDF ke andar embed ki gayi files list kijiye, nikaaliye, joDiye ya hataiye.
  • PDF Inspector — PDF ka version, page sizes, fonts, images, forms, security aur standards ke daave dekhiye.
  • PDF ke Annotations hataiye — PDF se comments, highlights, drawings aur stamps nikaaliye, chahein to links rakh lijiye.
  • PDF Metadata Editor — PDF ka title, author aur baaki fields dekhein, badlein ya hataiye.
  • PDF Decrypt karein — Encrypted PDF se password protection hataayein.
  • Flatten PDF — Bhare hue form fields ko page me fix karein.
  • File Hash & Checksum — Kisi file ke MD5, SHA-1, SHA-256 aur SHA-512 checksums compute karein aur expected hash se verify karein.

Security ke aur tools

  • JWT Decoder — Ek JWT ka header aur payload decode karein aur exp/iat inspect karein (bina verification ke).
  • Hash Generator — Web Crypto API ke through SHA-256 / SHA-1 / SHA-384 / SHA-512.
  • Password Generator — Strength meter ke saath strong, random passwords generate karein (crypto-secure).
  • SSH Key Generator — Ed25519, RSA ya ECDSA SSH key pairs aapke browser mein generate karein aur download karein.
  • PPK ↔ PEM Converter — SSH private keys ko PuTTY .ppk aur OpenSSH/PEM (RSA & Ed25519) ke beech aapke browser mein locally convert karein.
  • TOTP / 2FA Generator — Ek base32 secret se time-based one-time passwords (2FA codes) generate karein.
  • JWT Signer — Ek payload aur secret se JWT (HS256/384/512) banayein aur sign karein — Web Crypto.
  • Basic Auth Generator — Username aur password se HTTP Basic Auth Authorization headers generate aur decode karein.
  • Certificate & Private Key Matcher — Check karein ki koi SSL certificate aur private key ek saath belong karte hain ya nahi, seedhe aapke browser mein.
  • PFX to PEM Extractor — Ek password-protected .pfx/.p12 file ko certificate, chain aur private-key PEM blocks mein split karein.
  • Bcrypt Generator — Ek password ko bcrypt se hash karein ya ek hash verify karein
  • HMAC Generator — Ek message ko secret key se SHA-256/512 HMAC se sign karein
  • Password Strength Checker — Password ki strength, entropy aur crack time test karein
  • X.509 Certificate Decoder — Ek PEM ya DER certificate ko subject, issuer, validity, SANs aur fingerprints mein decode karein.
  • Diceware Passphrase Generator — EFF wordlist se yaad rehne wali, crypto-secure passphrases banayein, live entropy bits ke saath.
  • CSP Analyzer — Ek Content-Security-Policy ko plain English mein explain karein aur risks severity se flag karein.
  • File Hash & Checksum — Kisi file ke MD5, SHA-1, SHA-256 aur SHA-512 checksums compute karein aur expected hash se verify karein.
  • IBAN Generator & Validator — Structurally-valid test IBANs banayein aur kisi bhi IBAN ka MOD-97 checksum validate karein.
  • AES Encryption Tool — Text ko passphrase se AES-256-GCM se encrypt aur decrypt karein
  • SHA-3 & Keccak Hash Generator — Text ya hex se SHA3, Keccak-256/512 aur SHAKE digests banayein
  • MD5 Hash — Apne browser mein text ya file ka MD5 hash banayein.
  • CRC32 — Text ka CRC32 checksum hex aur decimal mein calculate karein.
  • CSR Decoder — Certificate request padhein: subject, SANs aur key size.
  • PDF privacy scanner — PDF mein chhupe metadata aur personal data dhoondein.

Security ke sabhi tools dekhein (27) · Saare tools