nerdexam
EC-Council

312-50V11 · Question #496

What tool should you use when you need to analyze extracted metadata from files you collected when you were in the initial stage of penetration test (information gathering)?

The correct answer is C. Metagoofil. Metagoofil is the correct tool for extracting and analyzing metadata from files collected during the information gathering phase of a penetration test.

Footprinting and Reconnaissance

Question

What tool should you use when you need to analyze extracted metadata from files you collected when you were in the initial stage of penetration test (information gathering)?

Options

  • AArmitage
  • BDimitry
  • CMetagoofil
  • Dcdpsnarf

How the community answered

(49 responses)
  • A
    8% (4)
  • B
    2% (1)
  • C
    86% (42)
  • D
    4% (2)

Why each option

Metagoofil is the correct tool for extracting and analyzing metadata from files collected during the information gathering phase of a penetration test.

AArmitage

Armitage is a graphical cyber attack management tool that serves as a GUI front-end for the Metasploit Framework, used for exploitation - not metadata analysis.

BDimitry

DMitry (Deepmagic Information Gathering Tool) is used for gathering information about hosts such as WHOIS data, open ports, and subdomains - not file metadata.

CMetagoofilCorrect

Metagoofil is an open-source intelligence tool specifically designed to extract metadata from publicly available documents such as PDFs, Word files, Excel spreadsheets, and PowerPoint presentations. It analyzes this metadata to reveal information such as usernames, software versions, server paths, and email addresses, which are directly useful during the reconnaissance phase of a penetration test.

Dcdpsnarf

cdpsnarf is a network packet sniffer designed to capture Cisco Discovery Protocol (CDP) packets and is unrelated to file metadata extraction.

Concept tested: Metadata extraction and analysis using Metagoofil

Source: https://www.kali.org/tools/metagoofil/

Topics

#metadata analysis#Metagoofil#OSINT#information gathering

Community Discussion

No community discussion yet for this question.

Full 312-50V11 Practice