La nueva FOCA 2.7

•Télécharger en tant que PPTX, PDF•

3 j'aime•843 vues

This document summarizes the capabilities of the FOCA tool for extracting metadata and hidden information from files. FOCA can analyze a wide range of file types including documents, images, and PDFs. It is able to uncover personal user data, system information, network details, device information, software versions, and more. The document provides examples of FOCA analyzing files from FBI.gov and its recursive network discovery algorithm. It concludes by noting new features in version 2.7.1 like RDP file analysis and an improved reporting module.

Technologie

MetadataRisks “Secret” relationships Government & companies Companies & providers Piracy Reputation Social engineering attacks Targeting Malware

FOCA: File types supported ,[object Object]

Adobe Indesign, SVG, SVGZ,[object Object]

Contenu connexe

Similaire à La nueva FOCA 2.7

Pentesting drivenbyfoca slides

BIT Technologies

Foca training hackcon6

Chema Alonso

FOCA 2.5.5 Training

Chema Alonso

Tactical Fingerprinting using metadata, hidden info and lost data

Chema Alonso

Pentesting iOS Applications

jasonhaddix

HoneyNet SOTM 32 - Windows Malware Analysis

Chetan Ganatra

Reconnaissance - For pentesting and user awareness

Leon Teale

technical-information-gathering-slides.pdf

MarceloCunha571649

Wussten Sie, dass Ihre Paket- bzw. Übertragungsdaten wertvolle und detailierte Einblicke für Ihre gesamte Operational Intelligence liefern? In dieser Session erfahren Sie mehr über die skalierbare Softwarelösung Splunk App for Stream (keine Hardware Taps notwendig), welche bestehende Andwendungsszenarien von Splunk in der IT und im Geschäftsbereich verstärkt und erweitert. In einer Live Demo zeigen wir Ihnen, wie Sie mit Übertragungsdaten zu mehr Operational Intelligence gelangen hinsichtlich: Infrastructure Operations Application Management Security

Splunk Stream - Einblicke in Netzwerk Traffic

Splunk

PRESENTATION of CEH Tools.pptx

AadityaSaxena12

A fresh new look into Information Gathering - OWASP Spain

Christian Martorella

Hacking Fundamentals - Jen Johnson , Miria Grunick

amiable_indian

Reconnaissance & Scanning

amiable_indian

Infrastructure Tracking with Passive Monitoring and Active Probing: ShmooCon ...

OpenDNS

Lab-4: Reconnaissance and Information Gathering A hacker uses many tools and methods to gather information about the target. There are two broad categories of information gathering methods: passive and active. These methods are detailed in the table below. In this lab, you will perform passive information gathering (gray-shaded column). In Lab 5, you will be performing active information gathering. Please review the table before starting this lab. Information Gathering Passive (Reconnaissance and Information Gathering) – This Week Active (Scanning and Enumeration) – Next Week Is the hacker contact with the target directly? No direct contact with the target Direct contact with the target Are the activities logged? No audit records on the target Audit record might be created What kind of tools has been used? Web archives, Whois service, DNS servers, Search Engines Port scanners, network scanners, vulnerability scanners (Nessus, Nmap) What information can a hacker collect? IP addresses, network range, telephone numbers, E-mail addresses, active machines, operating system version, network topology Live hosts on a network, network topology, OS version, open ports on hosts, services running on hosts, running applications and their versions, patching level, vulnerabilities. In passive information gathering, the hacker does not directly contact the target; therefore, no audit logs have been created. Both non-technical (such as employee names, birth dates, e-mail addresses) and technical information (IP addresses, domain names) can be gathered. This information can be used in many ways in the subsequent steps of the attack. For example, the phone numbers or e-mail addresses you discovered can be used in social engineering attacks. DNS records or subdomain names can be used to leverage specific attacks against hosts or URLs. More notes on Reconnaissance and Information Gathering : 1) In this phase, an attacker may collect a lot of information without being noticed. 2) In some cases, an attacker may even discover vulnerabilities. 3) The information collected in this phase can be quite valuable when evaluated together with the information collected in the scanning and enumeration phase. For example, you might find the phone number and name of an employee in this phase, and you may find the computer IP address in the active scanning phase. You can use these two pieces of information together to leverage a social engineering attack. An attacker will increase the chance of gaining trust when s/he calls the victim's name and talk some specific about the victim's computer. 4) Companies should also perform reconnaissance and information gathering against themselves so that they can discover -before hackers- what kind of information the company and company employees disclose. In this lab, you will practice 6 passive methods of Reconnaissance and Information Gathering. You have to use Kali VM in Sections 3, 5, and 6 of the lab. You may use Kali.

Lab-4 Reconnaissance and Information Gathering A hacker.docx

LaticiaGrissomzz

voip_en

Pierpaolo Palazzoli

Module 2 Foot Printing

leminhvuong

Pentesting Android Apps

Abdelhamid Limami

The (in)security of File Hosting Services

Marco Balduzzi

Toorcon - Purple Haze: The Spear Phishing Experience

Jesse Nebling

Similaire à La nueva FOCA 2.7 (20)

Pentesting drivenbyfoca slides

Foca training hackcon6

FOCA 2.5.5 Training

Tactical Fingerprinting using metadata, hidden info and lost data

Pentesting iOS Applications

HoneyNet SOTM 32 - Windows Malware Analysis

Reconnaissance - For pentesting and user awareness

technical-information-gathering-slides.pdf

Splunk Stream - Einblicke in Netzwerk Traffic

PRESENTATION of CEH Tools.pptx

A fresh new look into Information Gathering - OWASP Spain

Hacking Fundamentals - Jen Johnson , Miria Grunick

Reconnaissance & Scanning

Infrastructure Tracking with Passive Monitoring and Active Probing: ShmooCon ...

Lab-4 Reconnaissance and Information Gathering A hacker.docx

voip_en

Module 2 Foot Printing

Pentesting Android Apps

The (in)security of File Hosting Services

Toorcon - Purple Haze: The Spear Phishing Experience

Plus de Eventos Creativos

La informática se creó en las calles: Microhistorias de Apple y Microsoft

Eventos Creativos

Windows server 2012 para it

Eventos Creativos

Pentesting con metasploit framework

Eventos Creativos

Malware en android

Eventos Creativos

Despliegue empresarial de smartphones mdm

Eventos Creativos

Atacando iphone a través de wireless y javascript botnet

Eventos Creativos

Ataque a redes de datos IPv6 con Evil Foca

Eventos Creativos

Windows 8

Eventos Creativos

Análisis forense de dispositivos android 03

Eventos Creativos

Análisis forense de dispositivos android 02

Eventos Creativos

Análisis forense de dispositivos android 01

Eventos Creativos

Análisis forense de dispositivos ios

Eventos Creativos

Arquitectura, aplicaciones y seguridad en ios

Eventos Creativos

Jailbreak y rooting más allá de los límites del dispositivo

Eventos Creativos

I os en el entorno corporativo

Eventos Creativos

Análisis forense de tarjetas sim, smartcards, etc

Eventos Creativos

Lo que las apps esconden

Eventos Creativos

Firma digital y biométrica en dispositivos móviles

Eventos Creativos

Nfc en móviles

Eventos Creativos

Fraude en tecnológias móviles

Eventos Creativos

Plus de Eventos Creativos (20)

La informática se creó en las calles: Microhistorias de Apple y Microsoft

Windows server 2012 para it

Pentesting con metasploit framework

Malware en android

Despliegue empresarial de smartphones mdm

Atacando iphone a través de wireless y javascript botnet

Ataque a redes de datos IPv6 con Evil Foca

Windows 8

Análisis forense de dispositivos android 03

Análisis forense de dispositivos android 02

Análisis forense de dispositivos android 01

Análisis forense de dispositivos ios

Arquitectura, aplicaciones y seguridad en ios

Jailbreak y rooting más allá de los límites del dispositivo

I os en el entorno corporativo

Análisis forense de tarjetas sim, smartcards, etc

Lo que las apps esconden

Firma digital y biométrica en dispositivos móviles

Nfc en móviles

Fraude en tecnológias móviles

Dernier

Data Cloud, More than a CDP by Matt Robison

Anna Loughnan Colquhoun

Scaling API-first – The story of a global engineering organization Ian Reasor, Senior Computer Scientist - Adobe Radu Cotescu, Senior Computer Scientist - Adobe Apidays New York 2024: The API Economy in the AI Era (April 30 & May 1, 2024) ------ Check out our conferences at https://www.apidays.global/ Do you want to sponsor or talk at one of our conferences? https://apidays.typeform.com/to/ILJeAaV8 Learn more on APIscene, the global media made by the community for the community: https://www.apiscene.io Explore the API ecosystem with the API Landscape: https://apilandscape.apiscene.io/

Apidays New York 2024 - Scaling API-first by Ian Reasor and Radu Cotescu, Adobe

apidays

ProductAnonymous-April2024-WinProductDiscovery-MelissaKlemke

Product Anonymous

Scaling API-first – The story of a global engineering organization

Radu Cotescu

Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024

The Digital Insurer

Building Digital Trust in a Digital Economy Veronica Tan, Director - Cyber Security Agency of Singapore Apidays Singapore 2024: Connecting Customers, Business and Technology (April 17 & 18, 2024) ------ Check out our conferences at https://www.apidays.global/ Do you want to sponsor or talk at one of our conferences? https://apidays.typeform.com/to/ILJeAaV8 Learn more on APIscene, the global media made by the community for the community: https://www.apiscene.io Explore the API ecosystem with the API Landscape: https://apilandscape.apiscene.io/

Apidays Singapore 2024 - Building Digital Trust in a Digital Economy by Veron...

apidays

Repurposing LNG terminals for Hydrogen Ammonia: Feasibility and Cost Saving

Edi Saputra

Real Time Object Detection Using Open CV

Khem

Manulife - Insurer Innovation Award 2024

The Digital Insurer

This presentation explores the impact of HTML injection attacks on web applications, detailing how attackers exploit vulnerabilities to inject malicious code into web pages. Learn about the potential consequences of such attacks and discover effective mitigation strategies to protect your web applications from HTML injection vulnerabilities. for more information visit https://bostoninstituteofanalytics.org/category/cyber-security-ethical-hacking/

HTML Injection Attacks: Impact and Mitigation Strategies

Boston Institute of Analytics

AWS Community Day CPH - Three problems of Terraform

Andrey Devyatkin

🐬 The future of MySQL is Postgres 🐘

RTylerCroy

The value of a flexible API Management solution for Open Banking Steve Melan, Manager for IT Innovation and Architecture - State's and Saving's Bank of Luxembourg Apidays New York 2024: The API Economy in the AI Era (April 30 & May 1, 2024) ------ Check out our conferences at https://www.apidays.global/ Do you want to sponsor or talk at one of our conferences? https://apidays.typeform.com/to/ILJeAaV8 Learn more on APIscene, the global media made by the community for the community: https://www.apiscene.io Explore the API ecosystem with the API Landscape: https://apilandscape.apiscene.io/

Apidays New York 2024 - The value of a flexible API Management solution for O...

apidays

Tata AIG General Insurance Company - Insurer Innovation Award 2024

The Digital Insurer

Workshop - Best of Both Worlds_ Combine KG and Vector search for enhanced R...

Neo4j

As privacy and data protection regulations evolve rapidly, organizations operating in multiple jurisdictions face mounting challenges to ensure compliance and safeguard customer data. With state-specific privacy laws coming up in multiple states this year, it is essential to understand what their unique data protection regulations will require clearly. How will data privacy evolve in the US in 2024? How to stay compliant? Our panellists will guide you through the intricacies of these states' specific data privacy laws, clarifying complex legal frameworks and compliance requirements. This webinar will review: - The essential aspects of each state's privacy landscape and the latest updates - Common compliance challenges faced by organizations operating in multiple states and best practices to achieve regulatory adherence - Valuable insights into potential changes to existing regulations and prepare your organization for the evolving landscape

TrustArc Webinar - Stay Ahead of US State Data Privacy Law Developments

TrustArc

With more memory available, system performance of three Dell devices increased, which can translate to a better user experience Conclusion When your system has plenty of RAM to meet your needs, you can efficiently access the applications and data you need to finish projects and to-do lists without sacrificing time and focus. Our test results show that with more memory available, three Dell PCs delivered better performance and took less time to complete the Procyon Office Productivity benchmark. These advantages translate to users being able to complete workflows more quickly and multitask more easily. Whether you need the mobility of the Latitude 5440, the creative capabilities of the Precision 3470, or the high performance of the OptiPlex Tower Plus 7010, configuring your system with more RAM can help keep processes running smoothly, enabling you to do more without compromising performance.

Boost PC performance: How more available memory can improve productivity

Principled Technologies

Created by Mozilla Research in 2012 and now part of Linux Foundation Europe, the Servo project is an experimental rendering engine written in Rust. It combines memory safety and concurrency to create an independent, modular, and embeddable rendering engine that adheres to web standards. Stewardship of Servo moved from Mozilla Research to the Linux Foundation in 2020, where its mission remains unchanged. After some slow years, in 2023 there has been renewed activity on the project, with a roadmap now focused on improving the engine’s CSS 2 conformance, exploring Android support, and making Servo a practical embeddable rendering engine. In this presentation, Rakhi Sharma reviews the status of the project, our recent developments in 2023, our collaboration with Tauri to make Servo an easy-to-use embeddable rendering engine, and our plans for the future to make Servo an alternative web rendering engine for the embedded devices industry. (c) Embedded Open Source Summit 2024 April 16-18, 2024 Seattle, Washington (US) https://events.linuxfoundation.org/embedded-open-source-summit/ https://ossna2024.sched.com/event/1aBNF/a-year-of-servo-reboot-where-are-we-now-rakhi-sharma-igalia

A Year of the Servo Reboot: Where Are We Now?

Igalia

MINDCTI Revenue Release Quarter One 2024

MIND CTI

Imagine a world where information flows as swiftly as thought itself, making decision-making as fluid as the data driving it. Every moment is critical, and the right tools can significantly boost your organization’s performance. The power of real-time data automation through FME can turn this vision into reality. Aimed at professionals eager to leverage real-time data for enhanced decision-making and efficiency, this webinar will cover the essentials of real-time data and its significance. We’ll explore: FME’s role in real-time event processing, from data intake and analysis to transformation and reporting An overview of leveraging streams vs. automations FME’s impact across various industries highlighted by real-life case studies Live demonstrations on setting up FME workflows for real-time data Practical advice on getting started, best practices, and tips for effective implementation Join us to enhance your skills in real-time data automation with FME, and take your operational capabilities to the next level.

From Event to Action: Accelerate Your Decision Making with Real-Time Automation

Safe Software

Dernier (20)

Data Cloud, More than a CDP by Matt Robison

Apidays New York 2024 - Scaling API-first by Ian Reasor and Radu Cotescu, Adobe

ProductAnonymous-April2024-WinProductDiscovery-MelissaKlemke

Scaling API-first – The story of a global engineering organization

Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024

Apidays Singapore 2024 - Building Digital Trust in a Digital Economy by Veron...

Repurposing LNG terminals for Hydrogen Ammonia: Feasibility and Cost Saving

Real Time Object Detection Using Open CV

Manulife - Insurer Innovation Award 2024

HTML Injection Attacks: Impact and Mitigation Strategies

AWS Community Day CPH - Three problems of Terraform

🐬 The future of MySQL is Postgres 🐘

Apidays New York 2024 - The value of a flexible API Management solution for O...

Tata AIG General Insurance Company - Insurer Innovation Award 2024

Workshop - Best of Both Worlds_ Combine KG and Vector search for enhanced R...

TrustArc Webinar - Stay Ahead of US State Data Privacy Law Developments

Boost PC performance: How more available memory can improve productivity

A Year of the Servo Reboot: Where Are We Now?

MINDCTI Revenue Release Quarter One 2024

From Event to Action: Accelerate Your Decision Making with Real-Time Automation

La nueva FOCA 2.7

1. 2.7.1 version Chema Alonso

2. FOCA 0.X

3. MetadataRisks “Secret” relationships Government & companies Companies & providers Piracy Reputation Social engineering attacks Targeting Malware

5. Open Office documents.

6. MS Office documents.

7. PDF Documents.

8. XMP.

9. EPS Documents.

10. Graphic documents.

11. EXIF.

12. XMP.

13.

14. Creators.

15. Modifiers .

16. Users in paths.

17. C:ocuments and settingsfooyfile

18. /home/johnnyf

19. Operating systems.

20. Printers.

21. Local and remote.

22. Paths.

23. Local and remote.

24. Network info.

25. Shared Printers.

26. Shared Folders.

27. ACLS.

28. Internal Servers.

29. NetBIOS Name.

30. Domain Name.

31. IP Address.

32. Database structures.

33. Table names.

34. Colum names.

35. Devices info.

36. Mobiles.

37. Photo cameras.

38. Private Info.

39. Personal data.

40. History of use.

41.

42.

43. Search for documents in Google and Bing

44. Automatic file downloading

45. Capable of extracting Metadata, hidden info and lost data

46. Cluster information

47.

48. Howmaydaysto do thepentesting?

49. Sometimes…a pentesterneedsto be a SuperHero

50.

51. Recursivealgorithm

52. InformationGathering

53. SwRecognition

54. DNS Cache Snooping

55.

56. Network DiscoveryAlgorithm http://apple1.sub.domain.com/~chema/dir/fil.doc http -> Web server GET Banner HTTP domain.com is a domain Search NS, MX, SPF records for domain.com sub.domain.com is a subdomain Search NS, MX, SPF records for sub.domain.com Try allthe non verified servers onall new domains server01.domain.com server01.sub.domain.com Apple1.sub.domain.com is a hostname Try DNS Prediction (apple1) onalldomains Try Google Sets(apple1) onalldomains

57. Network DiscoveryAlgorithm http://apple1.sub.domain.com/~chema/dir/fil.doc 11) Resolve IP Address 12) GetCertificate in https://IP 13) Searchfordomainnames in it 14) Get HTTP Banner of http://IP 15) Use Bing Ip:IPtofindalldomainssharingit 16) Repeatforevery new domain 17) Connecttotheinternal NS (1 orall) 18) Perform a PTR Scansearchingforinternal servers 19) Forevery new IP discovered try Bing IP recursively 20) ~chema-> chemaisprobably a user

58. Network DiscoveryAlgorithm http://apple1.sub.domain.com/~chema/dir/fil.doc 21) / , /~chema/ and /~chema/dir/ are paths 22) Try directorylisting in allthepaths 23) Searchfor PUT, DELETE, TRACE methods in everypath 24) Fingerprint software from 404 error messages 25) Fingerprint software fromapplication error messages 26) Try commonnamesonalldomains (dictionary) 27) Try Zone Transfer onall NS 28) Searchforany URL indexedby web enginesrelatedtothehostname 29) Downloadthe file 30) Extractthemetadata, hiddeninfo and lost data 31) Sortallthisinformationand presentitnicely 32) Forevery new IP/URL startoveragain

59.

60. FOCA 2.5: Exalead

61. Hugedomains case

62. Digital Certificates

63. FOCA 2.5 & Shodan

64. FOCA 2.5 URL Analysis

65. .listing

66. Unsecure Http Methods

67. Search & Upload

68. Searchingfor Server-Side Technologies

69. Fuzzingoptions

70. DNS Cache Snooping