La nueva FOCA 2.7

•Transferir como PPTX, PDF•

3 gostaram•843 visualizações

This document summarizes the capabilities of the FOCA tool for extracting metadata and hidden information from files. FOCA can analyze a wide range of file types including documents, images, and PDFs. It is able to uncover personal user data, system information, network details, device information, software versions, and more. The document provides examples of FOCA analyzing files from FBI.gov and its recursive network discovery algorithm. It concludes by noting new features in version 2.7.1 like RDP file analysis and an improved reporting module.

Tecnologia

MetadataRisks “Secret” relationships Government & companies Companies & providers Piracy Reputation Social engineering attacks Targeting Malware

FOCA: File types supported ,[object Object]

Adobe Indesign, SVG, SVGZ,[object Object]

Mais conteúdo relacionado

Semelhante a La nueva FOCA 2.7

Pentesting drivenbyfoca slidesBIT Technologies

Foca training hackcon6Chema Alonso

FOCA 2.5.5 TrainingChema Alonso

Tactical Fingerprinting using metadata, hidden info and lost dataChema Alonso

Pentesting iOS Applicationsjasonhaddix

HoneyNet SOTM 32 - Windows Malware AnalysisChetan Ganatra

Reconnaissance - For pentesting and user awarenessLeon Teale

technical-information-gathering-slides.pdfMarceloCunha571649

Splunk Stream - Einblicke in Netzwerk TrafficSplunk

PRESENTATION of CEH Tools.pptxAadityaSaxena12

A fresh new look into Information Gathering - OWASP SpainChristian Martorella

Hacking Fundamentals - Jen Johnson , Miria Grunickamiable_indian

Reconnaissance & Scanningamiable_indian

Infrastructure Tracking with Passive Monitoring and Active Probing: ShmooCon ...OpenDNS

Lab-4 Reconnaissance and Information Gathering A hacker.docxLaticiaGrissomzz

voip_enPierpaolo Palazzoli

Module 2 Foot Printingleminhvuong

Pentesting Android AppsAbdelhamid Limami

The (in)security of File Hosting ServicesMarco Balduzzi

Toorcon - Purple Haze: The Spear Phishing ExperienceJesse Nebling

Semelhante a La nueva FOCA 2.7 (20)

Pentesting drivenbyfoca slides

Foca training hackcon6

FOCA 2.5.5 Training

Tactical Fingerprinting using metadata, hidden info and lost data

Pentesting iOS Applications

HoneyNet SOTM 32 - Windows Malware Analysis

Reconnaissance - For pentesting and user awareness

technical-information-gathering-slides.pdf

Splunk Stream - Einblicke in Netzwerk Traffic

PRESENTATION of CEH Tools.pptx

A fresh new look into Information Gathering - OWASP Spain

Hacking Fundamentals - Jen Johnson , Miria Grunick

Reconnaissance & Scanning

Infrastructure Tracking with Passive Monitoring and Active Probing: ShmooCon ...

Lab-4 Reconnaissance and Information Gathering A hacker.docx

voip_en

Module 2 Foot Printing

Pentesting Android Apps

The (in)security of File Hosting Services

Toorcon - Purple Haze: The Spear Phishing Experience

Mais de Eventos Creativos

La informática se creó en las calles: Microhistorias de Apple y MicrosoftEventos Creativos

Windows server 2012 para itEventos Creativos

Pentesting con metasploit frameworkEventos Creativos

Malware en androidEventos Creativos

Despliegue empresarial de smartphones mdmEventos Creativos

Atacando iphone a través de wireless y javascript botnetEventos Creativos

Ataque a redes de datos IPv6 con Evil FocaEventos Creativos

Windows 8Eventos Creativos

Análisis forense de dispositivos android 03Eventos Creativos

Análisis forense de dispositivos android 02Eventos Creativos

Análisis forense de dispositivos android 01Eventos Creativos

Análisis forense de dispositivos iosEventos Creativos

Arquitectura, aplicaciones y seguridad en iosEventos Creativos

Jailbreak y rooting más allá de los límites del dispositivoEventos Creativos

I os en el entorno corporativoEventos Creativos

Análisis forense de tarjetas sim, smartcards, etcEventos Creativos

Lo que las apps escondenEventos Creativos

Firma digital y biométrica en dispositivos móvilesEventos Creativos

Nfc en móvilesEventos Creativos

Fraude en tecnológias móvilesEventos Creativos

Mais de Eventos Creativos (20)

La informática se creó en las calles: Microhistorias de Apple y Microsoft

Windows server 2012 para it

Pentesting con metasploit framework

Malware en android

Despliegue empresarial de smartphones mdm

Atacando iphone a través de wireless y javascript botnet

Ataque a redes de datos IPv6 con Evil Foca

Windows 8

Análisis forense de dispositivos android 03

Análisis forense de dispositivos android 02

Análisis forense de dispositivos android 01

Análisis forense de dispositivos ios

Arquitectura, aplicaciones y seguridad en ios

Jailbreak y rooting más allá de los límites del dispositivo

I os en el entorno corporativo

Análisis forense de tarjetas sim, smartcards, etc

Lo que las apps esconden

Firma digital y biométrica en dispositivos móviles

Nfc en móviles

Fraude en tecnológias móviles

Último

Enhancing Worker Digital Experience: A Hands-on Workshop for PartnersThousandEyes

The 7 Things I Know About Cyber Security After 25 Years | April 2024Rafal Los

GenCyber Cyber Security Day PresentationMichael W. Hawkins

Injustice - Developers Among Us (SciFiDevCon 2024)Allon Mureinik

Automating Business Process via MuleSoft Composer | Bangalore MuleSoft Meetup...shyamraj55

#StandardsGoals for 2024: What’s new for BISAC - Tech Forum 2024BookNet Canada

SQL Database Design For Developers at php[tek] 2024Scott Keck-Warren

My Hashitalk Indonesia April 2024 PresentationRidwan Fadjar

08448380779 Call Girls In Greater Kailash - I Women Seeking MenDelhi Call girls

Install Stable Diffusion in windows machinePadma Pradeep

Human Factors of XR: Using Human Factors to Design XR SystemsMark Billinghurst

Kotlin Multiplatform & Compose Multiplatform - Starter kit for pragmaticscarlostorres15106

08448380779 Call Girls In Diplomatic Enclave Women Seeking MenDelhi Call girls

Slack Application Development 101 Slidespraypatel2

FULL ENJOY 🔝 8264348440 🔝 Call Girls in Diplomatic Enclave | Delhisoniya singh

SIEMENS: RAPUNZEL – A Tale About Knowledge GraphNeo4j

How to convert PDF to text with Nanonetsnaman860154

Salesforce Community Group Quito, Salesforce 101Paola De la Torre

08448380779 Call Girls In Friends Colony Women Seeking MenDelhi Call girls

IAC 2024 - IA Fast Track to Search Focused AI SolutionsEnterprise Knowledge

La nueva FOCA 2.7

1. 2.7.1 version Chema Alonso

2. FOCA 0.X

3. MetadataRisks “Secret” relationships Government & companies Companies & providers Piracy Reputation Social engineering attacks Targeting Malware

5. Open Office documents.

6. MS Office documents.

7. PDF Documents.

8. XMP.

9. EPS Documents.

10. Graphic documents.

11. EXIF.

12. XMP.

13.

14. Creators.

15. Modifiers .

16. Users in paths.

17. C:ocuments and settingsfooyfile

18. /home/johnnyf

19. Operating systems.

20. Printers.

21. Local and remote.

22. Paths.

23. Local and remote.

24. Network info.

25. Shared Printers.

26. Shared Folders.

27. ACLS.

28. Internal Servers.

29. NetBIOS Name.

30. Domain Name.

31. IP Address.

32. Database structures.

33. Table names.

34. Colum names.

35. Devices info.

36. Mobiles.

37. Photo cameras.

38. Private Info.

39. Personal data.

40. History of use.

41.

42.

43. Search for documents in Google and Bing

44. Automatic file downloading

45. Capable of extracting Metadata, hidden info and lost data

46. Cluster information

47.

48. Howmaydaysto do thepentesting?

49. Sometimes…a pentesterneedsto be a SuperHero

50.

51. Recursivealgorithm

52. InformationGathering

53. SwRecognition

54. DNS Cache Snooping

55.

56. Network DiscoveryAlgorithm http://apple1.sub.domain.com/~chema/dir/fil.doc http -> Web server GET Banner HTTP domain.com is a domain Search NS, MX, SPF records for domain.com sub.domain.com is a subdomain Search NS, MX, SPF records for sub.domain.com Try allthe non verified servers onall new domains server01.domain.com server01.sub.domain.com Apple1.sub.domain.com is a hostname Try DNS Prediction (apple1) onalldomains Try Google Sets(apple1) onalldomains

57. Network DiscoveryAlgorithm http://apple1.sub.domain.com/~chema/dir/fil.doc 11) Resolve IP Address 12) GetCertificate in https://IP 13) Searchfordomainnames in it 14) Get HTTP Banner of http://IP 15) Use Bing Ip:IPtofindalldomainssharingit 16) Repeatforevery new domain 17) Connecttotheinternal NS (1 orall) 18) Perform a PTR Scansearchingforinternal servers 19) Forevery new IP discovered try Bing IP recursively 20) ~chema-> chemaisprobably a user

58. Network DiscoveryAlgorithm http://apple1.sub.domain.com/~chema/dir/fil.doc 21) / , /~chema/ and /~chema/dir/ are paths 22) Try directorylisting in allthepaths 23) Searchfor PUT, DELETE, TRACE methods in everypath 24) Fingerprint software from 404 error messages 25) Fingerprint software fromapplication error messages 26) Try commonnamesonalldomains (dictionary) 27) Try Zone Transfer onall NS 28) Searchforany URL indexedby web enginesrelatedtothehostname 29) Downloadthe file 30) Extractthemetadata, hiddeninfo and lost data 31) Sortallthisinformationand presentitnicely 32) Forevery new IP/URL startoveragain

59.

60. FOCA 2.5: Exalead

61. Hugedomains case

62. Digital Certificates

63. FOCA 2.5 & Shodan

64. FOCA 2.5 URL Analysis

65. .listing

66. Unsecure Http Methods

67. Search & Upload

68. Searchingfor Server-Side Technologies

69. Fuzzingoptions

70. DNS Cache Snooping