Preview Mode Links will not work in preview mode

Tradecraft Security Weekly (Audio)

May 18, 2017

Public File Metadata Analysis with PowerMeta - It is very common for organizations to post files (docx, pdf, xlsx, etc.) to publicly available websites on the Internet. Often times these organizations have not taken the time to strip the metadata attached to these files. This leaves the potential for remote attackers to discover sensitive information from them including usernames, software used to create them, or system names. In this episode Beau demonstrates a PowerShell tool called PowerMeta that can be used to discover these files on a target site and extract the metadata from them.


Strip Word Docs of Metadata:

Strip PDFs of Metadata:

Strip Photos of Metadata: