Packing PDFs and Word docs?

This post has been de-listed

It is no longer included in search results and normal feeds (front page, hot posts, subreddit posts, etc). It remains visible only via the author's post history.

Post Flair (click to view more posts with a particular flair)

Education

Post Body

Aimed at Ethical Hackers -

For certain I know that usually exe or dll files in order NOT to be detected by the AV or other defense systems are being packed(either custom developed or commercially used, such as UPX).

But how come hackers avoid packing PDFs and Word docs? Is there a drawback to this?

I think most AVs have this option to inspect the 'inside' of document files and for certain can alert on embedded macros or any kind of script or am I wrong here?

I'd love your opinion on this, hopefully we can form a discussion - Thanks.

Author

Account Strength

90%

Account Age

6 years

Verified Email

Yes

Verified Flair

Total Karma

572

Link Karma

461

Comment Karma

111

Profile updated: 3 days ago

thebestgorko

Subreddit

r/AskNetsec

Post Details

We try to extract some basic information from the post title. This is not always successful or accurate, please use your best judgement and compare these values to the post title and body for confirmation.

Posted: 6 months ago
Reddit URL: View post on reddit.com
External URL: reddit.com/r/AskNetsec/c...