312-50V11 · Question #727
You are performing information gathering for an important penetration test. You have found pdf, doc, and images in your objective. You decide to extract metadata from these files and analyze it. What
The correct answer is C. Metagoofil. Metagoofil is an OSINT tool purpose-built to extract and analyze metadata from publicly available document types such as PDFs, Word files, and images.
Question
You are performing information gathering for an important penetration test. You have found pdf, doc, and images in your objective. You decide to extract metadata from these files and analyze it. What tool will help you with the task?
Options
- AArmitage
- BDmitry
- CMetagoofil
- Dcdpsnarf
How the community answered
(36 responses)- A3% (1)
- B6% (2)
- C89% (32)
- D3% (1)
Why each option
Metagoofil is an OSINT tool purpose-built to extract and analyze metadata from publicly available document types such as PDFs, Word files, and images.
Armitage is a graphical cyber-attack management interface for the Metasploit Framework, used for exploitation and post-exploitation - not metadata extraction.
Dmitry (Deepmagic Information Gathering Tool) is an OSINT tool for gathering host/domain information such as subdomains, email addresses, and open ports - not file metadata.
Metagoofil searches for and downloads public documents (PDF, DOC, XLS, PPT, images) from a target domain and then extracts metadata such as usernames, email addresses, software versions, server names, and file paths. This metadata can reveal internal infrastructure details and user account names useful in a penetration test's information-gathering phase.
cdpsnarf is a network sniffer designed to capture Cisco Discovery Protocol packets from network traffic, which is unrelated to file metadata extraction.
Concept tested: Metadata extraction from documents using Metagoofil
Source: https://www.kali.org/tools/metagoofil/
Topics
Community Discussion
No community discussion yet for this question.