nerdexam
EC-Council

312-50V10 · Question #727

You are performing information gathering for an important penetration test. You have found pdf, doc, and images in your objective. You decide to extract metadata from these files and analyze it. What

The correct answer is C. Metagoofil. Metagoofil is an OSINT tool purpose-built to download and extract metadata from publicly available documents, revealing usernames, software versions, and internal paths useful in penetration testing.

Footprinting and Reconnaissance

Question

You are performing information gathering for an important penetration test. You have found pdf, doc, and images in your objective. You decide to extract metadata from these files and analyze it. What tool will help you with the task?

Options

  • AArmitage
  • BDmitry
  • CMetagoofil
  • Dcdpsnarf

How the community answered

(41 responses)
  • A
    5% (2)
  • B
    2% (1)
  • C
    93% (38)

Why each option

Metagoofil is an OSINT tool purpose-built to download and extract metadata from publicly available documents, revealing usernames, software versions, and internal paths useful in penetration testing.

AArmitage

Armitage is a graphical user interface for the Metasploit Framework used for exploitation and post-exploitation management, not for extracting metadata from document files.

BDmitry

Dmitry (Deepmagic Information Gathering Tool) performs WHOIS lookups, subdomain enumeration, and TCP port scanning against a target - it does not parse metadata from local document files.

CMetagoofilCorrect

Metagoofil extracts metadata from file types including PDF, DOC, XLS, PPT, and images (JPEG/PNG), parsing fields such as author names, software versions, server paths, and email addresses that can be used for further reconnaissance or credential attacks. It can also automate Google searches to discover and download documents belonging to a target domain before performing the metadata analysis.

Dcdpsnarf

cdpsnarf is a network packet capture tool that sniffs Cisco Discovery Protocol (CDP) packets on a LAN segment and has no capability for extracting metadata from document files.

Concept tested: Metadata extraction from documents using Metagoofil OSINT tool

Source: https://www.kali.org/tools/metagoofil/

Topics

#metadata extraction#Metagoofil#OSINT#document analysis

Community Discussion

No community discussion yet for this question.

Full 312-50V10 Practice