pdfinfo¶
pdfinfo (from the poppler suite) prints the document-level metadata of a PDF: title, author, producer, creation and modification dates, page count, PDF version, page size and whether the file is encrypted. It is the quickest way to size up a PDF challenge.
What Aperi'Solve runs¶
$ pdfinfo document.pdf
The output is returned as a table of the non-blank lines.
Reading the output¶
Title: Annual Report
Author: alice
Producer: LibreOffice 7.4
CreationDate: Sat Jul 5 12:00:00 2025 UTC
Pages: 3
Encrypted: no
Page size: 612 x 792 pts (letter)
PDF version: 1.7
- Author / Producer / Creator — the tool that generated the file. A mismatch with the document's apparent origin, or a telling username, is a common early clue.
- CreationDate / ModDate — timestamps that can order events or expose a file that was edited after it was "signed".
- Pages — a blank-looking PDF with more pages than you can see hides content off-canvas or in a hidden layer.
- Encrypted: yes — the content stream is protected; you may need the password (or a permissions crack) before other tools can read it.
Installing locally¶
$ apt install poppler-utils
The same package provides pdftotext, pdfimages and pdftk-style
helpers for extracting the actual content.
Limitations¶
- Reports only the document metadata, not the objects inside — for suspicious JavaScript, embedded files or auto-actions use pdfid, which also runs on your upload.
- Malformed or truncated PDFs may report nothing; poppler is fairly lenient but not a repair tool.
Common CTF patterns¶
- A revealing
AuthororProducerstring, or a comment left in the metadata. - Extra pages beyond what a viewer shows, holding hidden text.
Encrypted: yespointing you toward a password/permissions puzzle before the flag is reachable.