VulnScanners Logo

Recon & OSINT

Metagoofil

Metadata extraction from public documents.

osintmetadata
metagoofil — terminal
$ metagoofil -d example.com -t pdf,docx -o loot

What it does

Metagoofil downloads a target's public documents (PDF, DOCX, XLS) and extracts metadata such as usernames, software versions, and file paths. That metadata often exposes internal naming conventions and tech stack.

Common use cases

  • •Extract internal usernames from document metadata for password-spraying campaigns.
  • •Identify software versions and OS details from file properties produced by the target.
  • •Map internal network paths and naming conventions leaked in public PDFs and spreadsheets.

Key features

  • •Downloads documents via search-engine queries automatically.
  • •Extracts authors, software versions, file paths, and creation dates.
  • •Filters by document type — PDF, DOCX, XLSX, PPTX, and more.

Source

https://github.com/opsdisk/metagoofil ↗

More Recon & OSINT tools

AmassIn-depth DNS enumeration and attack-surface mapping.SubfinderPassive subdomain discovery at scale.dnsxFast, multi-purpose DNS toolkit for resolution and probing.theHarvesterEmail, subdomain, and host OSINT gathering.

Need hosted scanning instead of local tooling?

Run a scan in the browser →