Thursday, 17 May 2012
Screencast: Collecting metadata with Metagoofil
Screencast: Collecting metadata with Metagoofil
By Peter Giannoulis, Contributor | Dec 1, 2008
1 comments
Digg
PrintMetagoofil, an information gatherer with the ability to extract metadata from public documents, can be extremely valuable when analyzing a target network.
Peter Giannoulis of The Academy.ca explains how penetration testers can use the tool to assess the security of a website or Web server. Learn how MetaGoofil probes servers for available docs, including PDFs and PowerPoints, and analyzes them for hidden data.
For more information about the tool you've seen here:
- Learn how some penetration testers are using tools like Maltego and Metagoofil, which put the Web's seemingly boundless stores of information to use.
- Peter Giannoulis demonstrates how to use the freely available Wikto tool for Web server assessment.
- Get the latest news and expert advice on penetration testing and ethical hacking.
Want more screencasts? Make sure to check out our other demonstrations of today's security tools.About the author:
Peter Giannoulis, GSEC, GCIH, GCIA, GCFA, GCFW, GREM, CISSP, is an information security consultant in Toronto, Ontario. He currently maintains www.theacademy.ca, which provides organizations streaming video on how to configure and troubleshoot many of today's top security products. He also serves as a technical director for GIAC.
Similar
Add comment
knowledge_central_tab
Knowledge Central
Trusted Mobility Index
The mobile ecosystem of devices, services and networks is at a critical inflection point.While the mobile revolution is unleashing massive opportunities in both emerging and mature economies, it is also increasing in complexity and confusion. The reality is the lightning-fast adoption of powerful, smart devices is outpacing society’s ability to secure them. Today, trust in mobility hangs in the balance.
The state of the Internet, Q4, 2011
Geography appears to play a role in frequency of observed attacks on specific ports. For example, Port 23 (Telnet) is a favorite target for attacks observed to be originating from South Korea and Turkey, where it accounted for more than five times the number of attacks targeting the next most popular port (445 in both countries). Other instances of geography-based port targeting include observed attacks centered on Port 1433 (Microsoft SQL Server) in China and on Port 80 (WWW/HTTP) in Indonesia.
HID Global deploys a centralized, web-based IP access control solution at Fuxi Power Plant
Unable to meet the needs for real-time monitoring with its traditional patrol system, China's Fuxi Power Plant has deployed HID Global's VertX V2000.
StubHub: How to spot fraud before it happens
Whenever a list of log-on credentials is dumped onto the Web, retailers get hit with waves of automated attacks. Here's how ticket marketplace StubHub fights the threat.
Nice screencast on
Nice screencast on collection of metadata.