Document Metadata, The Silent Killer - PaulDotCom

More documents

Recommendations

Info

A pretty picture • President Obama’s official photo • First taken with a digital camera • First to contain metadata! • Let’s analyze... Wednesday, March 11, 2009
• So, what can we learn? Strings doesn’t cut it! • What are the possible risks and potential for something interesting? • So, who would you attack? <strong>The</strong> BlackBerry or the photographer? exiftool -a -u -g1 -b obama-officialportrait.jpg ---- ExifTool ---- ExifTool Version Number : 7.23 ---- File ---- File Name : obama-officialportrait.jpg Directory : . File Size : 785 kB File Modification Date/Time : 2009:01:15 10:12:02 File Type : JPEG MIME Type : image/jpeg Exif Byte Order : Big-endian (Motorola, MM) ---- IFD0 ---- Image Description : Official portrait of President-elect Barack Obama on Jan. 13, 2009...(Photo by Pete Souza).. Make : Canon Camera Model Name : Canon EOS 5D Mark II Software : Adobe Photoshop CS3 Macintosh Modify Date : 2009:01:13 19:35:18 Artist : Pete Souza Copyright : ¬© 2008 Pete Souza ---- ExifIFD ---- Date/Time Original : 2009:01:13 17:38:39 Create Date : 2009:01:13 17:38:39 ---- Photoshop ---- Photoshop 0x0425 : Ó\¯ıG›%œrè.ë+finº XML Data: (Binary data 6160 bytes, use -b option to extract) ---- ICC-header ---- Profile CMM Type : ADBE Profile Version : 2.1.0 Profile Class : Display Device Profile Color Space Data : RGB Profile Connection Space : XYZ Profile Date Time : 1999:06:03 00:00:00 Profile File Signature : acsp Primary Platform : Apple Computer Inc. CMM Flags : Not Embedded, Independent Wednesday, March 11, 2009
Page 1 and 2: Metadata in Common Document Types !
Page 3 and 4: What I Learned • Processing 560,0
Page 5 and 6: Wednesday, March 11, 2009
Page 7 and 8: Wednesday, March 11, 2009 Word!
Page 9 and 10: Word! $ strings Test_Metadata_Docum
Page 11 and 12: Wednesday, March 11, 2009 Acrobatic
Page 13: Acrobatics! $ strings Test Metadata
Page 17 and 18: Too revealing? • How about the em
Page 19 and 20: Wednesday, March 11, 2009 Picture t
Page 21 and 22: Speaking of location • How about
Page 23 and 24: Adding GPS up • We now know: •
Page 25 and 26: A few scary examples • Eliot •
Page 27 and 28: Wednesday, March 11, 2009 Eliot, Ho
Page 29 and 30: Wednesday, March 11, 2009 Tina, Hom
Page 31 and 32: Wednesday, March 11, 2009 Taking it
Page 33 and 34: How do we know? • PGP Keysigning
Page 35 and 36: Direct e-mail example Delivered-To:
Page 37 and 38: OOO Subject: [Email Tips] The Keyma
Page 39 and 40: Too cool for tool • Sure, there
Page 41 and 42: Analyzing Word • Metagoofil • E
Page 47 and 48: Exiftool • It turns out that Exif
Page 49 and 50: Custom user lists • So, lets take
Page 51 and 52: My pwn SANS Paper InfoKey: Creator
Page 53 and 54: JPEG GPS Data • Google maps is yo
Page 55 and 56: Wednesday, March 11, 2009 Maltego D
Page 57 and 58: Wednesday, March 11, 2009 Document
Page 59 and 60: Wednesday, March 11, 2009 This is h
Page 61 and 62: How can this be used? • Determine
Page 65 and 66:
Consider this... • Remember this
Page 67 and 68:
Microshafted! • For prior to Offi
Page 69 and 70:
PDF! • Acrobat Standard/Pro • G
Page 71 and 72:
A note on cleanup... • Some infor
Page 73:
EOF larry@pauldotcom.com http://www
show all

Document Metadata, The Silent Killer - PaulDotCom

Create successful ePaper yourself

Delete template?

Save as template?