All Projects → docbleach → Docbleach

docbleach / Docbleach

Licence: mit
🚿 Sanitising your documents, one threat at a time. — Content Disarm & Reconstruction Software

Programming Languages

java
68154 projects - #9 most used programming language

Projects that are alternatives of or similar to Docbleach

Androiddocumentviewer
Android 文档查看: word、excel、ppt、pdf,使用mupdf及tbs
Stars: ✭ 235 (+113.64%)
Mutual labels:  office, pdf
Rastrea2r
Collecting & Hunting for IOCs with gusto and style
Stars: ✭ 169 (+53.64%)
Mutual labels:  security-tools, threat
Phpword
A pure PHP library for reading and writing word processing documents
Stars: ✭ 6,017 (+5370%)
Mutual labels:  office, pdf
Open Paperless
Scan, index, and archive all of your paper documents (acquired by Mayan EDMS)
Stars: ✭ 2,538 (+2207.27%)
Mutual labels:  office, pdf
Skyark
SkyArk helps to discover, assess and secure the most privileged entities in Azure and AWS
Stars: ✭ 526 (+378.18%)
Mutual labels:  security-tools, threat
Zettlr
A Markdown Editor for the 21st century.
Stars: ✭ 6,099 (+5444.55%)
Mutual labels:  office, pdf
Officeproducer
Produce doc/docx/pdf format from doc/docx template
Stars: ✭ 95 (-13.64%)
Mutual labels:  office, pdf
Pdfscribe
A PDF virtual printer for 64-bit Windows 7 / 2008R2 or later.
Stars: ✭ 106 (-3.64%)
Mutual labels:  pdf
Play Pdf
A PDF module for the Play framework
Stars: ✭ 108 (-1.82%)
Mutual labels:  pdf
Pdf
Simple http microservice that converts Word documents to PDF
Stars: ✭ 107 (-2.73%)
Mutual labels:  pdf
Powerpointlabs
This is the project for PowerPointLabs, a productivity add-in for PowerPoint
Stars: ✭ 106 (-3.64%)
Mutual labels:  office
Jwt
A JWT (JSON Web Token) Encoder & Decoder
Stars: ✭ 107 (-2.73%)
Mutual labels:  security-tools
Deksterecon
Web Application recon automation
Stars: ✭ 109 (-0.91%)
Mutual labels:  security-tools
Invoice As A Service
💰 Simple invoicing service (REST API): from JSON to PDF
Stars: ✭ 106 (-3.64%)
Mutual labels:  pdf
Fisy Fuzz
This is the full file system fuzzing framework that I presented at the Hack in the Box 2020 Lockdown Edition conference in April.
Stars: ✭ 110 (+0%)
Mutual labels:  security-tools
Backfuzz
protocol fuzzing toolkit
Stars: ✭ 106 (-3.64%)
Mutual labels:  security-tools
Pdf Generator
PDF Generator library, easy way to create PDF from String Content or Any HTML Content.
Stars: ✭ 110 (+0%)
Mutual labels:  pdf
Nb pdf template
A more accurate representation of jupyter notebooks when converting to pdfs.
Stars: ✭ 109 (-0.91%)
Mutual labels:  pdf
Lancia
网页转PDF渲染服务。提供收据、发票、报告或任何网页内容转PDF的微服务
Stars: ✭ 108 (-1.82%)
Mutual labels:  pdf
Embedos
EmbedOS - Embedded security testing virtual machine
Stars: ✭ 108 (-1.82%)
Mutual labels:  security-tools

DocBleach is an advanced Content Disarm and Reconstruction software. Its objective is to remove misbehaving dynamic content from your Office files, or everything that could be a threat to the safety of your computer.

Build Status

Let's assume your job involves working with files from external sources, for instance reading resumes from unknown applicants. You receive for example a .doc file, your anti-virus doesn't detect it as harmful, and you decide to open it anyway. You get infected. You can use DocBleach to sanitize this document: chances are you don't get infected, because the dynamic content isn't run.

Howto's

To build DocBleach, use Maven:

$ mvn clean package
...
[INFO] ------------------------------------------------------------------------
[INFO] BUILD SUCCESS
[INFO] ------------------------------------------------------------------------
[INFO] Total time: 10.696 s
[INFO] Finished at: 2016-12-19T17:36:10+01:00
[INFO] Final Memory: 29M/234M
[INFO] ------------------------------------------------------------------------

The final jar is stored in cli/target/docbleach.jar.

To use DocBleach, you may either use the Web Interface or run it in CLI:

java -jar docbleach.jar -in unsafe_document.doc -out safe_doc.doc

The input file may be a relative/absolute path, an URI (think: http:// link), or a dash (-).

The output file may be a relative/absolute path, or a dash (-).

If a dash is given, the input will be taken from stdin, and the output will be sent to stdout.

DocBleach's information (removed threats, errors, ...) are sent to stderr.

Advanced usage

Get the sources

    git clone https://github.com/docbleach/DocBleach.git
    cd DocBleach
    mvn install
    # Import it as a Maven project in your favorite IDE

You've developed a new cool feature ? Fixed an annoying bug ? We'd be happy to hear from you !

Run the tests

The tests run with JUnit 5, which is perfectly integrated in Maven. To run tests, just run mvn test. You should get something similar to this:

[INFO] Scanning for projects...
...
-------------------------------------------------------
 T E S T S
-------------------------------------------------------
Dec 19, 2016 5:33:54 PM org.junit.platform.launcher.core.ServiceLoaderTestEngineRegistry loadTestEngines
INFO: Discovered TestEngines with IDs: [junit-jupiter]
Running org.docbleach.bleach.PdfBleachTest
Tests run: 8, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.246 sec - in org.docbleach.bleach.PdfBleachTest
Running org.docbleach.bleach.OLE2BleachTest

Results :

Tests run: 13, Failures: 0, Errors: 0, Skipped: 0

[INFO] ------------------------------------------------------------------------
[INFO] BUILD SUCCESS
[INFO] ------------------------------------------------------------------------
[INFO] Total time: 3.252 s
[INFO] Finished at: 2016-12-19T17:33:55+01:00
[INFO] Final Memory: 19M/211M
[INFO] ------------------------------------------------------------------------

BUILD SUCCESS confirms that all the tests were run successfuly.

Related links

Releases

The releases are available as Windows executables that don't depend on Java, thanks to the Excelsior Jet technology.

License

See LICENSE.

Project Status

Don't expect the code base to change everyday, but feel free to contribute: new ideas are more than welcome, and threats evolve - so should we.

Some things would be awesome, though:

  • Adding a way to configure bleaches
  • Write tests!
  • Writing more content to show and explain how the sanitation process works, why it works.
  • Adding more stats!
Note that the project description data, including the texts, logos, images, and/or trademarks, for each open source project belongs to its rightful owner. If you wish to add or remove any projects, please contact us at [email protected].