PDFRip
A multi-threaded PDF password cracking utility equipped with commonly encountered password format builders and dictionary attacks.
pdfrip is a fast multithreaded PDF password cracking utility written in Rust with support for wordlist-based dictionary attacks, date, number range, and alphanumeric brute-forcing, and a custom query builder for password formats.
![]() |
STRING{69-420}
which would generate and use a wordlist with the full number range.DDMMYYYY
format which is a pretty commonly used password format for PDFs.5000-100000
and it would bruteforce with the whole range.a-zA-Z0-9
) will be triedInstall with cargo
:
$ cargo install --git https://github.com/mufeedvh/pdfrip.git
Prerequisites:
$ git clone https://github.com/mufeedvh/pdfrip.git
$ cd pdfrip/
$ cargo build --release
The first command clones this repository into your local machine and the last two commands enters the directory and builds the source in release mode.
Get a list of all the arguments:
$ pdfrip --help
Start a dictionary attack with a wordlist:
$ pdfrip -f encrypted.pdf wordlist rockyou.txt
Bruteforce number ranges for the password:
$ pdfrip -f encrypted.pdf range 1000 9999
Bruteforce all dates in a span (inclusive in both ends) of years for the password in DDMMYYYY
format:
$ pdfrip -f encrypted.pdf date 1900 2000
Bruteforce arbitrary strings of length 4-8:
$ pdfrip -f encrypted.pdf default-query --max-length 8
Bruteforce arbitrary strings of length 3:
$ pdfrip -f encrypted.pdf default-query --max-length 3 --min-length 3
Build a custom query to generate a wordlist: (useful when you know the password format)
$ pdfrip -f encrypted.pdf custom-query ALICE{1000-9999}
$ pdfrip -f encrypted.pdf custom-query DOC-ID{0-99}-FILE
Enable preceding zeros for custom queries: (which would make {10-5000}
to {0010-5000}
matching the end range's digits)
$ pdfrip -f encrypted.pdf custom-query ALICE{10-9999} --add-preceding-zeros
Ways to contribute:
Licensed under the MIT License, see LICENSE for more information.