c2pa-attacks | Content Authenticity Security Tool

c2pa-attacks is a Rust library. c2pa-attacks has no bugs, it has no vulnerabilities, it has a Permissive License and it has low support. You can download it from GitHub.

This tool is used to generate C2PA images which can be used for security testing. The goal of this tool is to allow the security teams at C2PA partners to generate images for security testing their software for vulnerabilities such as cross-site scripting. The tool will ingest a file of attack strings, add the string into the designated manifest field, and produce a corresponding malicious C2PA image that can be uploaded to the website or provided to the software for testing. The tool does not automatically check to see if the attack was successful. Each C2PA tool or service will have its own unique behavior and technology stack. Therefore, this tool is a framework for generating malicious images for testing in a manner that can be customized for specific targets. It is expected that the user of the tool will create customized attack files for their specific environment. The files provided with this tool are just examples for initial experimentation. Please note: While this tool is a modification of the open-source C2PA c2patool, it is not a replacement for that tool. The c2patool contains much more functionality and the c2patool would be a companion for this tool during analysis and testing. This tool includes the foundation for a testing environment. Refer to the appendices for information on how to expand this tool's baseline to cover more file types, more injections, and other forms of code coverage.