FOCA (Fingerprinting Organizations with Collected Archives)
FOCA is a tool used mainly to find metadata and hidden information in the documents it scans. These documents may be on web pages, and can be downloaded and analysed with FOCA. It is capable of analysing a wide variety of documents, with the most common being Microsoft Office, Open Office, or PDF files, although it also analyses Adobe InDesign or SVG files, for instance. These documents are searched for using three possible search engines: Google, Bing, and DuckDuckGo. The sum of the results from the three engines amounts to a lot of documents. It is also possible to add local files to extract the EXIF information from graphic files, and a complete analysis of the information discovered through the URL is conducted even before downloading the file. Releases Check here our latest releases. Requisites To run the solution locally the system will need: Microsoft Windows (64 bits). Versions 7, 8, 8.1 and 10. Microsoft .NET Framework 4.7.1. Microsoft Visual C++ 2010 x64 or greater. An instance of SQL Server 2014 or greater. Notes When starting the app the system will check if there is a SQL Server instance available. If no
FEATURES
ALTERNATIVES
A full-featured reconnaissance framework for web-based reconnaissance with a modular design.
A collection of scripts for Turbo Intruder, a penetration testing tool
A guide on basic Linux privilege escalation techniques including enumeration, data analysis, exploit customization, and trial and error.
A penetration testing framework for identifying and exploiting vulnerabilities.
Participation in the Red Team for Pacific Rim CCDC 2017 with insights on infrastructure design and competition tips.
XAHICO Web Platform is a cloud-based solution for vulnerability detection, penetration testing, and adversary simulation, accessible through web browsers and suitable for various user levels.
A unified repository for different Metasploit Framework payloads.
PINNED
InfoSecHired
An AI-powered career platform that automates the creation of cybersecurity job application materials and provides company-specific insights for job seekers.
Mandos Brief Newsletter
A weekly newsletter providing cybersecurity leadership insights, industry updates, and strategic guidance for security professionals advancing to management positions.
Kriptos
An AI-driven data classification and governance platform that automatically discovers, analyzes, and labels sensitive information while providing risk management and compliance capabilities.
System Two Security
An AI-powered platform that automates threat hunting and analysis by processing cyber threat intelligence and generating customized hunt packages for SOC teams.
Aikido Security
Aikido is an all-in-one security platform that combines multiple security scanning and management functions for cloud-native applications and infrastructure.
Permiso
Permiso is an Identity Threat Detection and Response platform that provides comprehensive visibility and protection for identities across multiple cloud environments.
Wiz
Wiz Cloud Security Platform is a cloud-native security platform that enables security, dev, and devops to work together in a self-service model, detecting and preventing cloud security threats in real-time.
Adversa AI
Adversa AI is a cybersecurity company that provides solutions for securing and hardening machine learning, artificial intelligence, and large language models against adversarial attacks, privacy issues, and safety incidents across various industries.