I just wrote this script. Its available at http://code.google.com/p/pdfinjector/
It injects the Collab getIcon exploit available at http://milw0rm.com/exploits/9579 into any non-password protected PDFs.
You can check out the video here.
http://www.securitytube.net/Exploitation-u...t%29-video.aspx
I'm thinking of integrating it with some MITM tools for pdf on the fly replacement either via iframe or normal link replacement or integrating some email sending functions into the script.
I have only tested this in BT4 and Windows XP. Let me know if this doesnt work for you. Thanks
