La nueva FOCA 2.7

•Télécharger en tant que PPTX, PDF•

3 j'aime•843 vues

This document summarizes the capabilities of the FOCA tool for extracting metadata and hidden information from files. FOCA can analyze a wide range of file types including documents, images, and PDFs. It is able to uncover personal user data, system information, network details, device information, software versions, and more. The document provides examples of FOCA analyzing files from FBI.gov and its recursive network discovery algorithm. It concludes by noting new features in version 2.7.1 like RDP file analysis and an improved reporting module.

Technologie

MetadataRisks “Secret” relationships Government & companies Companies & providers Piracy Reputation Social engineering attacks Targeting Malware

FOCA: File types supported ,[object Object]

Adobe Indesign, SVG, SVGZ,[object Object]

Contenu connexe

Similaire à La nueva FOCA 2.7

Pentesting drivenbyfoca slides

BIT Technologies

Foca training hackcon6

Chema Alonso

FOCA 2.5.5 Training

Chema Alonso

Tactical Fingerprinting using metadata, hidden info and lost data

Chema Alonso

Pentesting iOS Applications

jasonhaddix

HoneyNet SOTM 32 - Windows Malware Analysis

Chetan Ganatra

Reconnaissance - For pentesting and user awareness

Leon Teale

technical-information-gathering-slides.pdf

MarceloCunha571649

Wussten Sie, dass Ihre Paket- bzw. Übertragungsdaten wertvolle und detailierte Einblicke für Ihre gesamte Operational Intelligence liefern? In dieser Session erfahren Sie mehr über die skalierbare Softwarelösung Splunk App for Stream (keine Hardware Taps notwendig), welche bestehende Andwendungsszenarien von Splunk in der IT und im Geschäftsbereich verstärkt und erweitert. In einer Live Demo zeigen wir Ihnen, wie Sie mit Übertragungsdaten zu mehr Operational Intelligence gelangen hinsichtlich: Infrastructure Operations Application Management Security

Splunk Stream - Einblicke in Netzwerk Traffic

Splunk

PRESENTATION of CEH Tools.pptx

AadityaSaxena12

A fresh new look into Information Gathering - OWASP Spain

Christian Martorella

Hacking Fundamentals - Jen Johnson , Miria Grunick

amiable_indian

Reconnaissance & Scanning

amiable_indian

Infrastructure Tracking with Passive Monitoring and Active Probing: ShmooCon ...

OpenDNS

Lab-4: Reconnaissance and Information Gathering A hacker uses many tools and methods to gather information about the target. There are two broad categories of information gathering methods: passive and active. These methods are detailed in the table below. In this lab, you will perform passive information gathering (gray-shaded column). In Lab 5, you will be performing active information gathering. Please review the table before starting this lab. Information Gathering Passive (Reconnaissance and Information Gathering) – This Week Active (Scanning and Enumeration) – Next Week Is the hacker contact with the target directly? No direct contact with the target Direct contact with the target Are the activities logged? No audit records on the target Audit record might be created What kind of tools has been used? Web archives, Whois service, DNS servers, Search Engines Port scanners, network scanners, vulnerability scanners (Nessus, Nmap) What information can a hacker collect? IP addresses, network range, telephone numbers, E-mail addresses, active machines, operating system version, network topology Live hosts on a network, network topology, OS version, open ports on hosts, services running on hosts, running applications and their versions, patching level, vulnerabilities. In passive information gathering, the hacker does not directly contact the target; therefore, no audit logs have been created. Both non-technical (such as employee names, birth dates, e-mail addresses) and technical information (IP addresses, domain names) can be gathered. This information can be used in many ways in the subsequent steps of the attack. For example, the phone numbers or e-mail addresses you discovered can be used in social engineering attacks. DNS records or subdomain names can be used to leverage specific attacks against hosts or URLs. More notes on Reconnaissance and Information Gathering : 1) In this phase, an attacker may collect a lot of information without being noticed. 2) In some cases, an attacker may even discover vulnerabilities. 3) The information collected in this phase can be quite valuable when evaluated together with the information collected in the scanning and enumeration phase. For example, you might find the phone number and name of an employee in this phase, and you may find the computer IP address in the active scanning phase. You can use these two pieces of information together to leverage a social engineering attack. An attacker will increase the chance of gaining trust when s/he calls the victim's name and talk some specific about the victim's computer. 4) Companies should also perform reconnaissance and information gathering against themselves so that they can discover -before hackers- what kind of information the company and company employees disclose. In this lab, you will practice 6 passive methods of Reconnaissance and Information Gathering. You have to use Kali VM in Sections 3, 5, and 6 of the lab. You may use Kali.

Lab-4 Reconnaissance and Information Gathering A hacker.docx

LaticiaGrissomzz

voip_en

Pierpaolo Palazzoli

Module 2 Foot Printing

leminhvuong

Pentesting Android Apps

Abdelhamid Limami

The (in)security of File Hosting Services

Marco Balduzzi

Toorcon - Purple Haze: The Spear Phishing Experience

Jesse Nebling

Similaire à La nueva FOCA 2.7 (20)

Pentesting drivenbyfoca slides

Foca training hackcon6

FOCA 2.5.5 Training

Tactical Fingerprinting using metadata, hidden info and lost data

Pentesting iOS Applications

HoneyNet SOTM 32 - Windows Malware Analysis

Reconnaissance - For pentesting and user awareness

technical-information-gathering-slides.pdf

Splunk Stream - Einblicke in Netzwerk Traffic

PRESENTATION of CEH Tools.pptx

A fresh new look into Information Gathering - OWASP Spain

Hacking Fundamentals - Jen Johnson , Miria Grunick

Reconnaissance & Scanning

Infrastructure Tracking with Passive Monitoring and Active Probing: ShmooCon ...

Lab-4 Reconnaissance and Information Gathering A hacker.docx

voip_en

Module 2 Foot Printing

Pentesting Android Apps

The (in)security of File Hosting Services

Toorcon - Purple Haze: The Spear Phishing Experience

Plus de Eventos Creativos

La informática se creó en las calles: Microhistorias de Apple y Microsoft

Eventos Creativos

Windows server 2012 para it

Eventos Creativos

Pentesting con metasploit framework

Eventos Creativos

Malware en android

Eventos Creativos

Despliegue empresarial de smartphones mdm

Eventos Creativos

Atacando iphone a través de wireless y javascript botnet

Eventos Creativos

Ataque a redes de datos IPv6 con Evil Foca

Eventos Creativos

Windows 8

Eventos Creativos

Análisis forense de dispositivos android 03

Eventos Creativos

Análisis forense de dispositivos android 02

Eventos Creativos

Análisis forense de dispositivos android 01

Eventos Creativos

Análisis forense de dispositivos ios

Eventos Creativos

Arquitectura, aplicaciones y seguridad en ios

Eventos Creativos

Jailbreak y rooting más allá de los límites del dispositivo

Eventos Creativos

I os en el entorno corporativo

Eventos Creativos

Análisis forense de tarjetas sim, smartcards, etc

Eventos Creativos

Lo que las apps esconden

Eventos Creativos

Firma digital y biométrica en dispositivos móviles

Eventos Creativos

Nfc en móviles

Eventos Creativos

Fraude en tecnológias móviles

Eventos Creativos

Plus de Eventos Creativos (20)

La informática se creó en las calles: Microhistorias de Apple y Microsoft

Windows server 2012 para it

Pentesting con metasploit framework

Malware en android

Despliegue empresarial de smartphones mdm

Atacando iphone a través de wireless y javascript botnet

Ataque a redes de datos IPv6 con Evil Foca

Windows 8

Análisis forense de dispositivos android 03

Análisis forense de dispositivos android 02

Análisis forense de dispositivos android 01

Análisis forense de dispositivos ios

Arquitectura, aplicaciones y seguridad en ios

Jailbreak y rooting más allá de los límites del dispositivo

I os en el entorno corporativo

Análisis forense de tarjetas sim, smartcards, etc

Lo que las apps esconden

Firma digital y biométrica en dispositivos móviles

Nfc en móviles

Fraude en tecnológias móviles

Dernier

Axa Assurance Maroc - Insurer Innovation Award 2024

The Digital Insurer

MySQL Webinar, presented on the 25th of April, 2024. Summary: MySQL solutions enable the deployment of diverse Database Architectures tailored to specific needs, including High Availability, Disaster Recovery, and Read Scale-Out. With MySQL Shell's AdminAPI, administrators can seamlessly set up, manage, and monitor these solutions, ensuring efficiency and ease of use in their administration. MySQL Router, on the other hand, provides transparent routing from the application traffic to the backend servers in the architectures, requiring minimal configuration. Completely built in-house and supported by Oracle, these solutions have been adopted by enterprises of all sizes for their business-critical applications. In this presentation, we'll delve into various database architecture solutions to help you choose the right one based on your business requirements. Focusing on technical details and the latest features to maximize the potential of these solutions.

Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...

Miguel Araújo

Modernizing Securities Finance: The cloud-native prime brokerage platform transforming capital markets. Madhu Subbu, Managing Director, Head of Securities Finance Engineering Apidays Singapore 2024: Connecting Customers, Business and Technology (April 17 & 18, 2024) ------ Check out our conferences at https://www.apidays.global/ Do you want to sponsor or talk at one of our conferences? https://apidays.typeform.com/to/ILJeAaV8 Learn more on APIscene, the global media made by the community for the community: https://www.apiscene.io Explore the API ecosystem with the API Landscape: https://apilandscape.apiscene.io/

Apidays Singapore 2024 - Modernizing Securities Finance by Madhu Subbu

apidays

Accelerating FinTech Innovation: Unleashing API Economy and GenAI Vasa Krishnan, Chief Technology Officer - FinResults Apidays New York 2024: The API Economy in the AI Era (April 30 & May 1, 2024) ------ Check out our conferences at https://www.apidays.global/ Do you want to sponsor or talk at one of our conferences? https://apidays.typeform.com/to/ILJeAaV8 Learn more on APIscene, the global media made by the community for the community: https://www.apiscene.io Explore the API ecosystem with the API Landscape: https://apilandscape.apiscene.io/

Apidays New York 2024 - Accelerating FinTech Innovation by Vasa Krishnan, Fin...

apidays

ProductAnonymous-April2024-WinProductDiscovery-MelissaKlemke

Product Anonymous

2024: Domino Containers - The Next Step. News from the Domino Container commu...

Martijn de Jong

Join our latest Connector Corner webinar to discover how UiPath Integration Service revolutionizes API-centric automation in a 'Quote to Cash' process—and how that automation empowers businesses to accelerate revenue generation. A comprehensive demo will explore connecting systems, GenAI, and people, through powerful pre-built connectors designed to speed process cycle times. Speakers: James Dickson, Senior Software Engineer Charlie Greenberg, Host, Product Marketing Manager

Connector Corner: Accelerate revenue generation using UiPath API-centric busi...

DianaGray10

Boost Fertility New Invention Ups Success Rates.pdf

sudhanshuwaghmare1

DBX First Quarter 2024 Investor Presentation

Dropbox

The value of a flexible API Management solution for Open Banking Steve Melan, Manager for IT Innovation and Architecture - State's and Saving's Bank of Luxembourg Apidays New York 2024: The API Economy in the AI Era (April 30 & May 1, 2024) ------ Check out our conferences at https://www.apidays.global/ Do you want to sponsor or talk at one of our conferences? https://apidays.typeform.com/to/ILJeAaV8 Learn more on APIscene, the global media made by the community for the community: https://www.apiscene.io Explore the API ecosystem with the API Landscape: https://apilandscape.apiscene.io/

Apidays New York 2024 - The value of a flexible API Management solution for O...

apidays

As privacy and data protection regulations evolve rapidly, organizations operating in multiple jurisdictions face mounting challenges to ensure compliance and safeguard customer data. With state-specific privacy laws coming up in multiple states this year, it is essential to understand what their unique data protection regulations will require clearly. How will data privacy evolve in the US in 2024? How to stay compliant? Our panellists will guide you through the intricacies of these states' specific data privacy laws, clarifying complex legal frameworks and compliance requirements. This webinar will review: - The essential aspects of each state's privacy landscape and the latest updates - Common compliance challenges faced by organizations operating in multiple states and best practices to achieve regulatory adherence - Valuable insights into potential changes to existing regulations and prepare your organization for the evolving landscape

TrustArc Webinar - Stay Ahead of US State Data Privacy Law Developments

TrustArc

FWD Group - Insurer Innovation Award 2024

The Digital Insurer

ICT role in 21st century education and its challenges

rafiqahmad00786416

Polkadot JAM Slides - Token2049 - By Dr. Gavin Wood

Juan lago vázquez

Emergent Methods: Multi-lingual narrative tracking in the news - real-time ex...

Zilliz

MS Copilot expands with MS Graph connectors

Nanddeep Nachan

How to Troubleshoot Apps for the Modern Connected Worker

ThousandEyes

Whatsapp Number Escorts Call girls 8617370543 Available 24x7 Navi Mumbai Call Girls Service Offer Genuine VIP Model Escorts Call Girls in Your Budget. Navi Mumbai Call Girls Service Provide Real Call Girls Number. Make Your Sexual Pleasure Memorable with Our Navi Mumbai Call Girls at Affordable Price. Top VIP Escorts Call Girls, High Profile Independent Escorts Call Girls, Housewife Women Escorts Call Girl, College Girls Escorts Call Girls, Russian Escorts Call girls Service in Your Budget.

Navi Mumbai Call Girls 🥰 8617370543 Service Offer VIP Hot Model

Deepika Singh

Automating Google Workspace (GWS) & more with Apps Script

wesley chun

Real Time Object Detection Using Open CV

Khem

Dernier (20)

Axa Assurance Maroc - Insurer Innovation Award 2024

Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...

Apidays Singapore 2024 - Modernizing Securities Finance by Madhu Subbu

Apidays New York 2024 - Accelerating FinTech Innovation by Vasa Krishnan, Fin...

ProductAnonymous-April2024-WinProductDiscovery-MelissaKlemke

2024: Domino Containers - The Next Step. News from the Domino Container commu...

Connector Corner: Accelerate revenue generation using UiPath API-centric busi...

Boost Fertility New Invention Ups Success Rates.pdf

DBX First Quarter 2024 Investor Presentation

Apidays New York 2024 - The value of a flexible API Management solution for O...

TrustArc Webinar - Stay Ahead of US State Data Privacy Law Developments

FWD Group - Insurer Innovation Award 2024

ICT role in 21st century education and its challenges

Polkadot JAM Slides - Token2049 - By Dr. Gavin Wood

Emergent Methods: Multi-lingual narrative tracking in the news - real-time ex...

MS Copilot expands with MS Graph connectors

How to Troubleshoot Apps for the Modern Connected Worker

Navi Mumbai Call Girls 🥰 8617370543 Service Offer VIP Hot Model

Automating Google Workspace (GWS) & more with Apps Script

Real Time Object Detection Using Open CV

La nueva FOCA 2.7

1. 2.7.1 version Chema Alonso

2. FOCA 0.X

3. MetadataRisks “Secret” relationships Government & companies Companies & providers Piracy Reputation Social engineering attacks Targeting Malware

5. Open Office documents.

6. MS Office documents.

7. PDF Documents.

8. XMP.

9. EPS Documents.

10. Graphic documents.

11. EXIF.

12. XMP.

13.

14. Creators.

15. Modifiers .

16. Users in paths.

17. C:ocuments and settingsfooyfile

18. /home/johnnyf

19. Operating systems.

20. Printers.

21. Local and remote.

22. Paths.

23. Local and remote.

24. Network info.

25. Shared Printers.

26. Shared Folders.

27. ACLS.

28. Internal Servers.

29. NetBIOS Name.

30. Domain Name.

31. IP Address.

32. Database structures.

33. Table names.

34. Colum names.

35. Devices info.

36. Mobiles.

37. Photo cameras.

38. Private Info.

39. Personal data.

40. History of use.

41.

42.

43. Search for documents in Google and Bing

44. Automatic file downloading

45. Capable of extracting Metadata, hidden info and lost data

46. Cluster information

47.

48. Howmaydaysto do thepentesting?

49. Sometimes…a pentesterneedsto be a SuperHero

50.

51. Recursivealgorithm

52. InformationGathering

53. SwRecognition

54. DNS Cache Snooping

55.

56. Network DiscoveryAlgorithm http://apple1.sub.domain.com/~chema/dir/fil.doc http -> Web server GET Banner HTTP domain.com is a domain Search NS, MX, SPF records for domain.com sub.domain.com is a subdomain Search NS, MX, SPF records for sub.domain.com Try allthe non verified servers onall new domains server01.domain.com server01.sub.domain.com Apple1.sub.domain.com is a hostname Try DNS Prediction (apple1) onalldomains Try Google Sets(apple1) onalldomains

57. Network DiscoveryAlgorithm http://apple1.sub.domain.com/~chema/dir/fil.doc 11) Resolve IP Address 12) GetCertificate in https://IP 13) Searchfordomainnames in it 14) Get HTTP Banner of http://IP 15) Use Bing Ip:IPtofindalldomainssharingit 16) Repeatforevery new domain 17) Connecttotheinternal NS (1 orall) 18) Perform a PTR Scansearchingforinternal servers 19) Forevery new IP discovered try Bing IP recursively 20) ~chema-> chemaisprobably a user

58. Network DiscoveryAlgorithm http://apple1.sub.domain.com/~chema/dir/fil.doc 21) / , /~chema/ and /~chema/dir/ are paths 22) Try directorylisting in allthepaths 23) Searchfor PUT, DELETE, TRACE methods in everypath 24) Fingerprint software from 404 error messages 25) Fingerprint software fromapplication error messages 26) Try commonnamesonalldomains (dictionary) 27) Try Zone Transfer onall NS 28) Searchforany URL indexedby web enginesrelatedtothehostname 29) Downloadthe file 30) Extractthemetadata, hiddeninfo and lost data 31) Sortallthisinformationand presentitnicely 32) Forevery new IP/URL startoveragain

59.

60. FOCA 2.5: Exalead

61. Hugedomains case

62. Digital Certificates

63. FOCA 2.5 & Shodan

64. FOCA 2.5 URL Analysis

65. .listing

66. Unsecure Http Methods

67. Search & Upload

68. Searchingfor Server-Side Technologies

69. Fuzzingoptions

70. DNS Cache Snooping