Free Trial

Safari Books Online is a digital library providing on-demand subscription access to thousands of learning resources.


Share this Page URL
Help

Chapter 8 - Information gathering > Summary - Pg. 221

Summary 221 by Christian Martorella. MetaGooFil is very good at pulling interesting information such as usernames and file paths out of documents, and scales rather well to do this over large bodies of documents. MetaGooFil is written in Python, which we dis- cussed in Chapter 2, so those interested in seeing exactly how it works can dig into the source code as well. SUMMARY Information gathering can potentially be of great use to us in the course of a pene- tration test. It can enable us to collect information on the people, system, and environments which are our targets and, based on this information, to attack them. There are many potential uses for the information we have harvested, but two of the primary purposes to which we might put such information are in social engineering efforts and in footprinting the target or targets of our attack. One of the great potential sources of information we have access to is Google. Searches conducted in Google's massive indexes can return us specific information on people, equipment, documents and files from which to harvest metadata, and all manner of other interesting information, provided we know how to conduct these searches