Home > Security Tips > Network Security Tactics > Screencast: Collecting metadata with Metagoofil
Security Tips:
EMAIL THIS
 TIPS & NEWSLETTERS TOPICS 

NETWORK SECURITY TACTICS

Screencast: Collecting metadata with Metagoofil


Peter Giannoulis, Contributor
11.25.2008
Rating: -5.00- (out of 5)


Network Security Tactics
Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us    Add to Google


Watch in full-screen

View Peter's Metagoofil demo in a larger window.

Metagoofil, an information gatherer with the ability to extract metadata from public documents, can be extremely valuable when analyzing a target network.

Peter Giannoulis of The Academy.ca explains how penetration testers can use the tool to assess the security of a website or Web server. Learn how MetaGoofil probes servers for available docs, including PDFs and PowerPoints, and analyzes them for hidden data.

For more information about the tool you've seen here:

  • Learn how some penetration testers are using tools like Maltego and Metagoofil, which put the Web's seemingly boundless stores of information to use.
  • Peter Giannoulis demonstrates how to use the freely available Wikto tool for Web server assessment.
  • Get the latest news and expert advice on penetration testing and ethical hacking.

    Want more screencasts? Make sure to check out our other demonstrations of today's security tools.

    About the author:
    Peter Giannoulis, GSEC, GCIH, GCIA, GCFA, GCFW, GREM, CISSP, is an information security consultant in Toronto, Ontario. He currently maintains www.theacademy.ca, which provides organizations streaming video on how to configure and troubleshoot many of today's top security products. He also serves as a technical director for GIAC.

    Rate this Tip
    To rate tips, you must be a member of SearchSecurity.com.
    Register now to start rating these tips. Log in if you are already a member.




    BROWSE BY TAG
    Network Security Tactics,   Application and Platform Security,   Enterprise Vulnerability Management,   Security Testing and Ethical Hacking,   VIEW ALL TAGS

    Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us    Add to Google



    RELATED CONTENT
    Network Security Tactics
    Screencast: Find rogue wireless acess points with Vistumbler
    How to prepare for a secure network hardware upgrade
    Preventing SQL injection attacks: A network admin's perspective
    Screencast: How to launch an OpenVAS scan
    Wireless network guidelines for PCI DSS compliance
    Aligning network security with business priorities
    Scanning with N-Stalker offers basic Web application security assessment
    Lifecycle of a network security vulnerability
    Screencast: BackTrack 4 offers an arsenal of penetration testing tools
    Network access control technology: Over-hyped or underused?

    Security Testing and Ethical Hacking
    H.D. Moore speaks about Metasploit Project deal, Release 3.3
    Could Metasploit popularity erode?
    Metasploit Project acquired by vulnerability management firm Rapid7
    Should management processes change based on a patch release schedule?
    Does an EULA make it truly illegal to decompile software?
    Screencast: BackTrack 4 offers an arsenal of penetration testing tools
    Security testing firm uncovers XML vulnerabilities
    Screencast: Samurai offers pen-testing nirvana
    The requirements needed to make an external penetration test legal
    McAfee to acquire Solidcore Systems for whitelisting

    RELATED GLOSSARY TERMS
    Terms from Whatis.com − the technology online dictionary
    Cyber Storm  (SearchSecurity.com)
    ethical hacker  (SearchSecurity.com)
    ethical worm  (SearchSecurity.com)
    gray hat  (SearchSecurity.com)
    honey pot  (SearchSecurity.com)
    honeynet  (SearchSecurity.com)
    war dialer  (SearchSecurity.com)
    white hat  (SearchSecurity.com)

    RELATED RESOURCES
    2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems
    Search Bitpipe.com for the latest white papers and business webcasts
    Whatis.com, the online computer dictionary

    DISCLAIMER: Our Tips Exchange is a forum for you to share technical advice and expertise with your peers and to learn from other enterprise IT professionals. TechTarget provides the infrastructure to facilitate this sharing of information. However, we cannot guarantee the accuracy or validity of the material submitted. You agree that your use of the Ask The Expert services and your reliance on any questions, answers, information or other materials received through this Web site is at your own risk.



  • Research Solutions for Network Security, Access Control and Security Threats
    TechTarget Security Media
    Information Security View this month\\'s issue and subscribe today.
    Information Security Decisions Apply online for free conference admission.
    SearchSecurity.com
    HomeNewsMagazineMultimediaWhite PapersLearningAdviceTopicsEventsAbout Us

    About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
    TechTarget provides technology professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective purchase decisions and managing their organizations' technology projects - with its network of technology-specific websites, events and online magazines.

    TechTarget Corporate Web Site  |  Media Kits  |  Site Map




    All Rights Reserved, Copyright 2003 - 2009, TechTarget | Read our Privacy Policy
      TechTarget - The IT Media ROI Experts