RSS Feed

Please wait while my feed loads

See more posts...

Newsletter

Subscribe to either one of our two newsletters for regular updates and information

Downloads newsletter

This is a weekly newsletter with download news, updates and other information

This is a monthly newsletter with software store information, offers and deals

FOCA Free 3.0

Make sure your website documents aren't giving away important information in their metadata

by Mike Williams

Our Rating:
Your Rating:
Login to rate
Based on 0 ratings
License: Freeware
Operating Systems: Windows 7 (32 bit), Windows 7 (64 bit), Windows Server, Windows Vista (32 bit), Windows Vista (64 bit), Windows XP
Requirements:

 

Languages: English
Software Cost: Free
Date Updated: 28 October 2011
Watchlist: Add download to my watchlist
Downloads To Date: 31897
Developer: Informatica 64
RSS News Feed: http://twitter.com/statuses/user_timeline/101166742.rss
Back in stock! Buy Malwarebytes Anti-Malware Premium v2 with a 1-PC LIFETIME license, only $24.95, from store.downloadcrew.com
FOCA Free 3.0
Make sure your website documents aren't giving away important information in their metadata

FOCA is an interesting penetration testing tool that allows you to find out more about a website by (amongst other things) analysing the metadata in any documents it makes available.

The process is surprisingly easy. Simply create a new document pointing FOCA at your website, click the Search All button, and FOCA will display all the PDF, Microsoft Office, Open Office and other documents on the site that have been indexed by Google, Bing and Exalead. (Which can be useful in itself, as you might discover you're exposing documents that were never intended for public view.)

Then, in a couple of clicks, you can have FOCA download these documents, extract their metadata, and summarise the results in a simple report. Exactly what might be exposed depends on the documents, what's been used to create them, and how well they've been cleaned, but commonly you'll see user names, network folders, printer names, email addresses, details on the software that's been used to create the files, and more - all very useful for hackers who might be looking to discover more about a particular target.

If you find your documents give away more information than you'd like, then check the creating software for tools that might be useful (search for keywords like Document Inspector or "metadata" in Office 2010, say).

Or, if you run your own IIS-based server, the FOCA authors also produce a program that may be of interest: MetaShield Protector. This cleans documents before they're sent to the client, so there's never any danger of information leaks.

Verdict:

A quick and easy way to analyse the metadata found in any website's documents

Your Comments & Opinion
 
Related Download Articles
 
Exif Pilot 4.7.1

Exif Pilot 4.7.2

Freeware

View and edit image EXIF, IPTC, and XMP tags

FileBot 4.5.6 for Windows

FileBot 4.5.6

Open Source

An essential tool for renaming digital TV, movies and music
 

BatchPurifier 5.0.2

BatchPurifier LITE 5.0.2

Freeware

Remove metadata from JPEGs with a click

JPEG & PNG Stripper 1.5.7.70

JPEG & PNG Stripper 1.5.7.70

Freeware

Quickly strip metadata from JPGs and PNGs

Other Download Articles From This Category
Emsisoft Internet Security

Emsisoft Internet Security 10.0.0.5409

Trial Software

Emsisoft's first completely integrated security solution

Emsisoft Anti-Malware

Emsisoft Anti-Malware 10.0.0.5409

Free, for personal-use only

Emsisoft's virus hunter is faster than ever

RogueKiller

RogueKiller 10.7.0

Freeware

Quickly detect and remove malicious processes (and a few others, probably)

My Lockbox

My Lockbox Free Edition 3.8.1

Freeware

Password-protect and hide private documents on your computer

From Softwarecrew

Please wait while my feed loads

See more posts...

Our Price: $22.95
RRP: $29.95
Saving 23%
Buy Now
 

Spotlight: Free Full Software

WhatsApp Messenger 2.12.1

Free Full Commercial Software

WhatsApp Messenger is the world's most popular instant messaging app for smartphones.

You can use it to send and receive text and voice messages, photos, videos, even call your friends in other countries, and because it uses your phone's internet connection it might not cost you anything at all (depending on whether you'll pay data charges).

It's easy to set up and use. There's no need to create and remember new account names or pins because it works with your phone number, and uses your regular address book to find and connect you with friends who use WhatsApp already.

You can talk one-to-one or in group chats, and because you're always logged in there's no way to miss messages. Even if your phone is turned off, WhatsApp will save your messages and display them as soon as you're back online.

There's plenty more (location sharing, contact exchange, message broadcasting) and the app is free for a year, currently $0.99/ year afterwards.

Version 2.12.1 brings:
 - WhatsApp Calling: Call your friends and family using WhatsApp for free, even if they’re in another country. WhatsApp calls use your phone’s Internet connection rather than your cellular plan’s voice minutes. Data charges may apply.

[...]
Value:
Free
Rating: