312-50V10 · Question #727
You are performing information gathering for an important penetration test. You have found pdf, doc, and images in your objective. You decide to extract metadata from these files and analyze it. What
The correct answer is C. Metagoofil. Metagoofil is an OSINT tool purpose-built to download and extract metadata from publicly available documents, revealing usernames, software versions, and internal paths useful in penetration testing.
Question
You are performing information gathering for an important penetration test. You have found pdf, doc, and images in your objective. You decide to extract metadata from these files and analyze it. What tool will help you with the task?
Options
- AArmitage
- BDmitry
- CMetagoofil
- Dcdpsnarf
How the community answered
(41 responses)- A5% (2)
- B2% (1)
- C93% (38)
Why each option
Metagoofil is an OSINT tool purpose-built to download and extract metadata from publicly available documents, revealing usernames, software versions, and internal paths useful in penetration testing.
Armitage is a graphical user interface for the Metasploit Framework used for exploitation and post-exploitation management, not for extracting metadata from document files.
Dmitry (Deepmagic Information Gathering Tool) performs WHOIS lookups, subdomain enumeration, and TCP port scanning against a target - it does not parse metadata from local document files.
Metagoofil extracts metadata from file types including PDF, DOC, XLS, PPT, and images (JPEG/PNG), parsing fields such as author names, software versions, server paths, and email addresses that can be used for further reconnaissance or credential attacks. It can also automate Google searches to discover and download documents belonging to a target domain before performing the metadata analysis.
cdpsnarf is a network packet capture tool that sniffs Cisco Discovery Protocol (CDP) packets on a LAN segment and has no capability for extracting metadata from document files.
Concept tested: Metadata extraction from documents using Metagoofil OSINT tool
Source: https://www.kali.org/tools/metagoofil/
Topics
Community Discussion
No community discussion yet for this question.