nerdexam
EC-Council

312-50V10 · Question #496

What tool should you use when you need to analyze extracted metadata from files you collected when you were in the initial stage of penetration test (information gathering)?

The correct answer is C. Metagoofil. Metagoofil is specifically designed to extract and analyze metadata from publicly available documents, making it the correct tool for the information gathering phase of a penetration test.

Footprinting and Reconnaissance

Question

What tool should you use when you need to analyze extracted metadata from files you collected when you were in the initial stage of penetration test (information gathering)?

Options

  • AArmitage
  • BDimitry
  • CMetagoofil
  • Dcdpsnarf

How the community answered

(46 responses)
  • A
    4% (2)
  • B
    2% (1)
  • C
    91% (42)
  • D
    2% (1)

Why each option

Metagoofil is specifically designed to extract and analyze metadata from publicly available documents, making it the correct tool for the information gathering phase of a penetration test.

AArmitage

Armitage is a graphical cyber attack management front-end for the Metasploit Framework, used for exploitation and post-exploitation, not metadata extraction.

BDimitry

Dmitry (DeepMagic Information Gathering Tool) is used for host-based OSINT such as WHOIS lookups and subdomain enumeration, not file metadata analysis.

CMetagoofilCorrect

Metagoofil searches for and downloads public documents (PDF, DOC, XLS, PPT, etc.) from a target domain and extracts embedded metadata such as usernames, software versions, email addresses, and server paths. This metadata is extremely valuable during the reconnaissance phase and can directly inform later attack stages.

Dcdpsnarf

cdpsnarf is a network packet sniffer that captures Cisco Discovery Protocol (CDP) frames to enumerate Cisco network devices and is unrelated to file metadata.

Concept tested: Metadata extraction from documents using Metagoofil

Source: https://www.kali.org/tools/metagoofil/

Topics

#Metagoofil#metadata analysis#OSINT#information gathering

Community Discussion

No community discussion yet for this question.

Full 312-50V10 Practice