ARTICLE MetaGoofil v1.4b released

Wednesday 12 May 2010 - 3270 read - ( Keywords : Data Mining , Information Gathering , MetaGooFil )

Metagoofil is an information gathering tool designed for extracting metadata of public documents (pdf,doc,xls,ppt,odp,ods) availables in the target/victim websites.

It will generate a html page with the results of the metadata extracted, plus a list of potential usernames very useful for preparing a bruteforce attack on open services like ftp, pop3,web applications, vpn, etc. Also it will extract a list of disclosed PATHs in the metadata, with this information you can guess OS, network names, Shared resources, etc.

This new version extracts MAC address from Microsoft Office documents. Now you can have an idea of what kind of hardware they are using.

All this information should not be available on the net, but most of the companies doesn’t have policies about information leaking... and most of them don’t know this information exists. So you can show them what information an attacker can obtain, with this simple technique.

More information: here


POSTSCRIPTUM

Download MetaGooFil v1.4b


RELATED ARTICLES

Data Mining, Information Gathering, MetaGooFil,

12 May 2010 : MetaGoofil v1.4b released
18 March 2009 : MetaGooFil updated to v1.4a