La nueva FOCA 2.7
•Download as PPTX, PDF•
3 likes•843 views
This document summarizes the capabilities of the FOCA tool for extracting metadata and hidden information from files. FOCA can analyze a wide range of file types including documents, images, and PDFs. It is able to uncover personal user data, system information, network details, device information, software versions, and more. The document provides examples of FOCA analyzing files from FBI.gov and its recursive network discovery algorithm. It concludes by noting new features in version 2.7.1 like RDP file analysis and an improved reporting module.
Recommended
Recommended
More Related Content
Similar to La nueva FOCA 2.7
Similar to La nueva FOCA 2.7 (20)
More from Eventos Creativos
More from Eventos Creativos (20)
Recently uploaded
Recently uploaded (20)
La nueva FOCA 2.7
- 1. 2.7.1 version Chema Alonso
- 2. FOCA 0.X
- 3. MetadataRisks “Secret” relationships Government & companies Companies & providers Piracy Reputation Social engineering attacks Targeting Malware
- 8. XMP.
- 11. EXIF.
- 12. XMP.
- 14. Creators.
- 15. Modifiers .
- 16. Users in paths.
- 18. /home/johnnyf
- 20. Printers.
- 22. Paths.
- 24. Network info.
- 25. Shared Printers.
- 26. Shared Folders.
- 27. ACLS.
- 29. NetBIOS Name.
- 30. Domain Name.
- 31. IP Address.
- 33. Table names.
- 34. Colum names.
- 35. Devices info.
- 36. Mobiles.
- 37. Photo cameras.
- 38. Private Info.
- 39. Personal data.
- 40. History of use.
- 43. Search for documents in Google and Bing
- 45. Capable of extracting Metadata, hidden info and lost data
- 49. Sometimes…a pentesterneedsto be a SuperHero
- 53. SwRecognition
- 56. Network DiscoveryAlgorithm http://apple1.sub.domain.com/~chema/dir/fil.doc http -> Web server GET Banner HTTP domain.com is a domain Search NS, MX, SPF records for domain.com sub.domain.com is a subdomain Search NS, MX, SPF records for sub.domain.com Try allthe non verified servers onall new domains server01.domain.com server01.sub.domain.com Apple1.sub.domain.com is a hostname Try DNS Prediction (apple1) onalldomains Try Google Sets(apple1) onalldomains
- 57. Network DiscoveryAlgorithm http://apple1.sub.domain.com/~chema/dir/fil.doc 11) Resolve IP Address 12) GetCertificate in https://IP 13) Searchfordomainnames in it 14) Get HTTP Banner of http://IP 15) Use Bing Ip:IPtofindalldomainssharingit 16) Repeatforevery new domain 17) Connecttotheinternal NS (1 orall) 18) Perform a PTR Scansearchingforinternal servers 19) Forevery new IP discovered try Bing IP recursively 20) ~chema-> chemaisprobably a user
- 58. Network DiscoveryAlgorithm http://apple1.sub.domain.com/~chema/dir/fil.doc 21) / , /~chema/ and /~chema/dir/ are paths 22) Try directorylisting in allthepaths 23) Searchfor PUT, DELETE, TRACE methods in everypath 24) Fingerprint software from 404 error messages 25) Fingerprint software fromapplication error messages 26) Try commonnamesonalldomains (dictionary) 27) Try Zone Transfer onall NS 28) Searchforany URL indexedby web enginesrelatedtothehostname 29) Downloadthe file 30) Extractthemetadata, hiddeninfo and lost data 31) Sortallthisinformationand presentitnicely 32) Forevery new IP/URL startoveragain
- 61. Hugedomains case
- 63. FOCA 2.5 & Shodan
- 64. FOCA 2.5 URL Analysis
- 65. .listing
- 67. Search & Upload
- 69. Fuzzingoptions
- 72. What’s new In 2.7.1
- 73. RDP & ICA Files Analysis
- 74. SquidProxies
- 75. DNS Records
- 76. NetrangeScan
- 77. ParametrizedURLs
- 78. Easy Bugs search
- 79. TaskList
- 80. Plugins
- 81. FearThe FOCA
- 82. IIS MetaShield Protector http://www.metashieldprotector.com
- 83. Buy a FOCA T-Shirt And be «Sexy» }:))
- 93. Workingon FOCA:
- 94. Chema Alonso
- 95. Alejandro Martín
- 96. Francisco Oca
- 97. Manuel Fernández «The Sur»
- 98. Daniel Romero
- 99. Enrique Rando
- 100. Pedro Laguna
- 101. SpecialThanksto: John Matherly [Shodan]