Dan Griffin's Blog

Comments on security, PKI, smart cards, cryptography, and entrepreneurship.

Check out http://www.edge-security.com/metagoofil.php. The ostensible purpose of the tool is to allow you to prepare for a pentest by pointing it at the target’s website. It automatically downloads files of relevant types and extracts potentially compromising metadata (e.g. MAC addresses, user names, etc).

Rest assured that there are tools out there that do the same with Social Security, credit card, and bank account numbers …

Permalink |

No Comments »

No comments yet.

RSS feed for comments on this post. TrackBack URL

Leave a comment