VulnScanners Logo

Recon & OSINT

FOCA

Document metadata analysis for Windows.

osintmetadatawindows
foca — terminal
$ # Windows GUI: add domain → analyze metadata

What it does

FOCA finds and analyzes metadata inside public documents to map users, folders, software, and servers tied to a target. A classic Windows tool for document-driven OSINT.

Common use cases

  • •Map internal server names and usernames leaked in metadata across public documents.
  • •Track document provenance and authorship across a target's published files.
  • •Identify the software stack used internally through document-generated metadata fields.

Key features

  • •Scans domain-linked documents for hidden metadata automatically.
  • •Supports PDF, Office, OpenOffice, and image-file metadata extraction.
  • •Displays a network graph of relationships between users, folders, and servers.

Source

https://github.com/ElevenPaths/FOCA ↗

More Recon & OSINT tools

AmassIn-depth DNS enumeration and attack-surface mapping.SubfinderPassive subdomain discovery at scale.dnsxFast, multi-purpose DNS toolkit for resolution and probing.theHarvesterEmail, subdomain, and host OSINT gathering.

Need hosted scanning instead of local tooling?

Run a scan in the browser →