We use cookies to provide you with a better experience. If you continue to use this site, we'll assume you're happy with this. Alternatively, click here to find out how to manage these cookies

hide cookie message
5,208 Software Downloads

FOCA Free 3.0

FOCA is an interesting penetration testing tool that allows you to find out more about a website by (amongst other things) analysing the metadata in any documents it makes available.

The process is surprisingly easy. Simply create a new document pointing FOCA at your website, click the Search All button, and FOCA will display all the PDF, Microsoft Office, Open Office and other documents on the site that have been indexed by Google, Bing and Exalead. (Which can be useful in itself, as you might discover you're exposing documents that were never intended for public view.)

Then, in a couple of clicks, you can have FOCA download these documents, extract their metadata, and summarise the results in a simple report. Exactly what might be exposed depends on the documents, what's been used to create them, and how well they've been cleaned, but commonly you'll see user names, network folders, printer names, email addresses, details on the software that's been used to create the files, and more - all very useful for hackers who might be looking to discover more about a particular target.

If you find your documents give away more information than you'd like, then check the creating software for tools that might be useful (search for keywords like Document Inspector or "metadata" in Office 2010, say).

Or, if you run your own IIS-based server, the FOCA authors also produce a program that may be of interest: MetaShield Protector. This cleans documents before they're sent to the client, so there's never any danger of information leaks.

Platforms: Windows 7 (32 bit), Windows 7 (64 bit), Windows Server, Windows Vista (32 bit), Windows Vista (64 bit), Windows XP
Version: 2.6.1
Licence: Freeware
Manufacturer: Informatica 64
Date Added: {ts '2011-10-28 14:23:00'}


IDG UK Sites

Nexus 6 vs Samsung Galaxy Note 4 comparison: What's the best Android phablet?

IDG UK Sites

The iPhone is doomed. Doomed to be marginally less successful than a very successful thing.

IDG UK Sites

How to prototype native mobile apps without writing code

IDG UK Sites

How to prepare for and update to OS X Yosemite: Get your Mac ready to download & install Apple's...