Downloaded 233 times
Uploaded byChema Alonso
FOCA 2.5.5 Training
FOCA is a tool that analyzes documents and extracts metadata, hidden information, and lost data that can be used to discover details about an organization's network structure and information systems. It uses metadata analysis and techniques like DNS records analysis, web crawling, and digital certificates to map internal servers, users, groups, file shares, and other details. The latest version of FOCA incorporates additional network discovery capabilities like DNS cache snooping to detect internal software and vulnerabilities. It provides automated and customizable reporting of findings to help security teams identify risks from information leakage.
More Related Content
FOCA 2.5.5 Training
- 1.
- 2.
- 3.
- 4.
- 5.
- 6.
- 7. A documentisWhatyousee…And whatyoudon´tTemplatepathsUsersworkedin it.Departments.File & Printing ServersVersionHistoryEmbedded files…
- 8. What kind ofdata can be found?Metadata:Information stored to give information about the document.For example: Creator, Organization, etc..Hidden information:Information internally stored by programs and not editable.For example: Template paths, Printers, db structure, etc…Lost data:Information which is in documents due to human mistakes or negligence, because it was not intended to be there.For example: Links to internal servers, data hidden by format, etc…
- 9.
- 10. MetadataRisks“Secret” relationshipsGovernment &companiesCompanies & providersPiracy discoveryReputationSocial engineering attacksTargeting Malware
- 11. 2003 – MSWord bytes Tony Blair
- 12.
- 13.
- 14. Electing the entrypoint
- 15. Why you shouldbe using FS
- 16.
- 17.
- 18.
- 19.
- 20.
- 21.
- 22.
- 23.
- 24. And of course,printedtxt
- 25. OLE StreamsIn MSOffice binaryformat filesStoreinformationaboutthe OSAre notcleanedwiththese ToolsFOCA findsthisinfo
- 26. FOCA: File typessupportedOffice documents:
- 27.
- 28.
- 29.
- 30.
- 31.
- 32.
- 33.
- 34.
- 35. Adobe Indesign, SVG,SVGZ (NEW)What can be found? Users:
- 36.
- 37.
- 38.
- 39.
- 40.
- 41.
- 42.
- 43.
- 44.
- 45.
- 46.
- 47.
- 48.
- 49.
- 50.
- 51.
- 52.
- 53.
- 54.
- 55.
- 56.
- 57.
- 58.
- 59.
- 60.
- 61.
- 62.
- 63.
- 64. Sample: FBI.govTotal: 4841 files
- 65.
- 66. FOCA 1 v.RC3Fingerprinting Organizations with Collected Archives
- 67. Search for documentsin Google and Bing
- 68.
- 69. Capable of extractingMetadata, hidden info and lost data
- 70.
- 71. Analyzes the infoto fingerprint the network.Metadata tracing
- 72.
- 73.
- 74. Sample: Printer infofound in odf files returned by Google
- 75.
- 76.
- 77.
- 78.
- 79.
- 81.
- 82. What’s new inFOCA 2.5?Network Discovery
- 83.