‫Footprinting, also known as reconnaissance, is the technique used for gathering information about
‫computer systems and the entities they belong to.
‫To get this information, a hacker might use various tools and technologies.
‫FOCA fingerprinting organizations with collected archives is a tool used mainly to find metadata and
‫hidden information in the documents it scans.
‫These documents may be on web pages and can be downloaded and analyzed with VOCA.
‫It's capable of analyzing a wide variety of documents with the most common being Microsoft Office,
‫OpenOffice or PDF files.
‫These documents are searched for three possible search engines Google, Bing and DuckDuckGo.
‫Here's how you can download and install FOCA.
‫You can download FOCA from the 11 Paths website that has seen on this slide, FOCA is open source.
‫You can download all the sources, as well as the executable binary from GitHub dot com slash 11 path
‫slash FOCA.
‫To work with FOCA.
‫Start a new project using Project Button on the upper left corner.
‫Give the project a name.
‫Enter the website and choose the folder to save the results to when you finish filling the fields,
‫click the Create button to create a new project.
‫After creating a new focus project, we can start a network scan from the tree at the left side select
‫network node.
‫Now select the search types.
‫The search types listed on the panel are web search.
‫You can choose whether Google or Bing DNA Search Dictionary Search to perform DNS search using a Dictionary
‫IP Bing to serve the domain names hosted on the same IP address showdown, and Rob ticks queries and
‫click the Start button to start the scan.
‫Now we can collect some documents published by the target domain to collect their metadata from the
‫tree at the left side.
‫Select Metadata Node You're supposed to see a panel similar to the one which is seen on the slide.
‫Select the document types you want to collect and click the Search All button to start the document
‫search.
‫You can see the documents found under metadata node of the tree.
‫You should download the documents to be able to extract the metadata, right click the documents you
‫want to download from the menu.
‫Select Download.
‫Now you can extract the metadata of the downloaded documents.
‫You can understand if a document is downloaded from the download column of the table.
‫Select the documents that you want to collect the metadata, right click and select extract metadata
‫from the menu.
‫You'll see the results under the metadata node of the tree.
‫Now you've got to remember before using folk, this version does require ask you all server xpress installed
‫on our computer.
‫So does that mean?
‫Yeah.
‫First, we need to install to ask you all server.
‫Open up your browser, go to Mascarell server download page and download the express version.
‫And so we need.
‫All right, we'll just do the basic insulation.
‫Yeah, accept the terms.
‫The installation location and.
‫Follow the instructions, just install, it's going to take a little while.
‫So we're going to do.
‫We're going to use FOCA and Windows.
‫So then we'll just go to the releases page on GitHub.
‫And download zip file and extract it.
‫So let's have a look at the FOCA interface, and let's just try it out.
‫Yeah, so first, we'll need to create a project.
‫Now in this test, we're going to scan NHS Dot UK.
‫And before we see FOCA in action, we're going to need to configure the FOCA options.
‫So you'll need to just Google the custom search API key.
‫Now, to get the search API key, there is documentation on the 11 Paths GitHub Wiki page so you can
‫learn your custom key search and configure your options.
‫Don't worry, I'll wait for you.
‫Now we can start a new scan, select the network node from the tree.
‫Select the search types on the dictionary search panel, you have to choose a valid dictionary, the
‫default path is probably not valid.
‫You can find a valid dictionary inside the DNS dictionary folder, which is under the bin folder where
‫you found the Foca Dot exact file.
‫Click the Start button to start the scan and let the scan continue for a couple of minutes.
‫Let's collect the documents from the Target website and extract their metadata.
‫Select the metadata node from the tree.
‫Select the document types you're interested in and click Search All Button to find the documents.
‫Let the search continue for a couple of minutes.
‫Select the documents that you want to collect the metadata.
‫Right click and select download.
‫Select the downloaded documents, right click and select Extract metadata at this time.
‫Look at the nodes under the metadata node of the tree and you will see the metadata extracted from other
‫downloaded documents.
‫You can examine the metadata of each document one by one, or you can find valuable data summarized
‫under the metadata summary node.
‫User names of the owners of the documents operating system with the document is created, email addresses
‫collected from the metadata of the documents and more.