Skip to content

antoniomalheirs/Forensic_Redact_Breaker

Repository files navigation

📄 Forensic Redact Breaker (PDF Security Auditor)

C++20 Forensics

A specialized C++ forensic tool designed to audit and "break" improperly redacted PDF documents. Redact Breaker analyzes PDF structures to identify leaked metadata, hidden layers, and poorly implemented pixelation/blur blocks that can be reversed to reveal sensitive information.

🔍 Forensic Analysis Flow

The tool performs a multi-stage audit of the target PDF file to identify security vulnerabilities.

graph TD
    PDF[Input PDF] --> Meta[Metadata Extraction]
    PDF --> Layer[Layer Dissection]
    PDF --> Pixel[Pixelation Analysis]
    
    Meta --> Report[Audit Report]
    Layer --> Hidden[Detect Hidden Objects]
    Pixel --> Reverse[Calculate Potential Reversal]
    
    Hidden --> Report
    Reverse --> Report
Loading

🛠️ Technical Features

  • Object Tree Inspection: Deep traversal of the PDF object graph to find discarded but still present text elements.
  • Redaction Verification: Validates if black boxes are actual vector objects or just visual overlays that can be moved.
  • Heuristic Reconstruction: Uses statistical analysis to attempt reconstruction of redacted text based on font metrics and layout remains.
  • Batch Processing: High-performance C++ engine capable of auditing thousands of documents per minute.

💻 Tech Stack

  • Language: C++20
  • Libraries: Poppler / PoDoFo (Internal forks for forensic access)
  • Formatting: JSON/MD export for forensic reporting.

Important

This tool is part of the Sentinel Data Solutions suite for government and private security auditors.

Sentinel Data Solutions | Precision PDF Forensics Developed by Zeca

About

Native C++17 forensic tool for analyzing PDF redaction failures. Features a custom binary parser, vector/raster redaction detection via GDI+, and text recovery capabilities. Zero external dependencies.

Topics

Resources

License

Stars

Watchers

Forks

Packages

 
 
 

Contributors