Monday, April 1, 2013

Hacking Software - FOCA


Software: FOCA

Description: FOCA (Fingerprinting Organizations with Collected Archives) is a Windows only forensic tool used to extract and analyze metadata from common file types. Metadata is basically descriptive information about data. For example, if you created a Word file in Microsoft Word, Microsoft Word would automatically include metadata in your Word file that would give out information like – when the file was created, using what program, what operating system was used to run the program, the username of the person creating the file, etc.. FOCA can extract this type of meta data from most common file types and analyze it, spitting back a report of very valuable information that can aid hackers during penetration tests.

Screenshot:












Features:
  • Extracts metadata from Open Office, MS Office, PDF, EPS and Graphic documents.
  • Uses Google, Bing and Exalead to find and examine the following file types on a target website – doc, ppt, pps, xls, docx, pptx, ppsx, xlsx, sxw, sxc, sxi, odt, ods, odg, odp, pdf, wpd, svg, svgz, indd, rdp , and ica.
  • From the extracted metadata, FOCA can find information on users, folders, printers, software, emails ,operating systems, passwords, servers and more.
  • Network Discovery
  • Fingerprinting
  • DNS Cache Snooping – discover what websites the internal users of a network are browsing on.
  • Exports data into a Report

Video Demonstration: There was no need for me to create a video because the creators did a great job presenting the tool at the DEFCON hacker conference. There’s three videos, but don’t worry, they are very entertaining.
Download: Click here and enter your email on the bottom of the page to receive a download link.

6 comments:

  1. Thank you for writing this tremendous top quality article. The information in this material confirms my point of view and you really laid it out well. I could never have written an article this good.

    ReplyDelete
  2. Nice piece of info! May I reference part of this on my blog if I post a backlink to this webpage? Thx.

    ReplyDelete
  3. This comment has been removed by the author.

    ReplyDelete
  4. It's great to see this post. I really appreciate your work.

    shareit free app

    ReplyDelete