B-TIER demo
Linux inside a 6MB PDF — RISC-V emulator embedded in a PDF
100k ft — What is this?
Linux inside a 6MB PDF — RISC-V emulator embedded in a PDF
50k ft — Why care?
@marc.kaz on a demo embedding a RISC-V emulator running Linux inside a standard 6MB PDF, runnable in a PDF reader. Cursed but real; good demo of PDF JS runtime abuse.
10k ft — Key takeaways
(no takeaways yet)
5k ft — Tools & techniques
(no tools tagged)
(no techniques tagged)
1k ft — Deep-dive / try it
You can now run a full Linux operating system inside a 6mb PDF.
Someone embedded a RISC-V emulator inside a standard document. You don’t need a virtual machine, just a PDF reader.
→ Runs interactively inside the file.
→ Powered by a tiny RISC-V emulator.
→ The entire OS fits in just 6MB.
will_spauld
14w
I promise you EVERY endpoint security tool is monitoring for execution from a PDF lol
Transcript excerpt
what's up guys so check this out I found a little hack you can basically run a full Linux operating system inside of a six megabyte PDF so I'm gonna link this little demo this is kind of funny because the reason it works is that this is a PDF is a complete execution environment and that's like a huge like security thing it's very under explored and under defended I would say I mean I don't think any security tool is looking for code execution inside of a PDF
More from @marc.kaz
- S-TIER Microsoft SkillOpt — agent skills that rewrite themselves against benchmarks
- B-TIER ASCILINE — 30fps video streamed as colored text over WebSockets
- S-TIER PPF Contact Solver — ZOZO's open-source GPU cloth and soft-body physics
- S-TIER Blender — • 500+ body, hand & face landmarks per frame
- A-TIER Carbonyl — full Chromium browser rendered inside your terminal