MODULE 4:- Information Gathering

1. How to use dnsenum for dns enumeration – Kali
2. How to use dig command in Kali Linux
3. whois Kali Linux commands with example
4. Enumerating DNS Records through dnsenum tool in Kali Linux
5. Email Harvesting by theharvester tool in Kali Linux
6. Google Hacking | Open Web Information Gathering
7. dnsmap | DNS Domain name system brute force attacks
8. Zone Transfer using dnswalk tool
9. Website information Gathering through Nikto tool
10. Search Senstive Data through Metagoofil Kali Linux 2.0
11. 8 Steps to run Maltego Kali Linux – beginner guide

 Description Metagofil Kali Linux 2.0

As per official website Metagoofil is an information gathering tool designed for extracting metadata of public documents (pdf,doc,xls,ppt,docx,pptx,xlsx) belonging to a target company.

Metagoofil will perform a search in Google to identify and download the documents to local disk and then will extract the metadata with different libraries like Hachoir, PdfMiner? and others. With the results it will generate a report with usernames, software versions and servers or machine names that will help Penetration testers in the information gathering phase.

Installation of Metagoofil Kali Linux 2.0

Metagoofil comes with pervious version of Kali Linux by default but Kali Linux 2.0 dont have Metagoofil. So you will have to install it to search senstive data of any organization.

#apt-get update

#apt-get install metagoofil

Usages

Usage: metagoofil options

-d: domain to search

-t: filetype to download (pdf,doc,xls,ppt,odp,ods,docx,xlsx,pptx)

-l: limit of results to search (default 200)

-h: work with documents in directory (use “yes” for local analysis)

-n: limit of files to download

-o: working directory (location to save downloaded files)

-f: output file

Metagoofil usage demo

Example : metagoofil -d www.hitechinstitute.in -t doc,pdf -l 200 -n 50 -o /root/Desktop/metagoofil/ -f results.html