established

PDF JavaScript Extractor & Risk Scanner

Extracts every piece of JavaScript a PDF can run — on open, on another triggered action, or by name — and flags common risky patterns.

Why it exists

Reviewing what a PDF's embedded JavaScript actually does before opening it in a reader that would execute it.

How to use it

Drop a PDF. Every script appears with its trigger and any flagged patterns.

Good to know

Most PDFs have no embedded JavaScript at all — it's mostly used for interactive forms. A flagged pattern is a starting point for review, not a verdict.

Open the tool