Cатсн²² (in)sесuяitу / ChrisJohnRiley

I first learnt about FOCA when I attended the Blackhat Europe presentation earlier this year. Even then in it’s early stages it was pretty impressive, although lacking in a couple of areas I seem to remember. Since then there have been a number of improvements in the product. Today I was informed that FOCA RC1 has been released with a list of bugfixes and features that have been requested over the past few months .:

• [+]Proxy supported.
• [+]Added alternative domains.
• [+]Added scan IP range to search IP resolutions.
• [+]Used Robtex to resolve IPs
• [+]Showed individual ACL in servers
• [+]Added option Export servers
• [~]Better representation of network analysis
• [~]Improved used documents search
• [*]Fix error in bing search

The RC1 version can be downloaded from http://www.informatica64.com/DownloadFOCA/

If you wish to receive updates when new versions of FOCA are made public, there is also the option to sign-up for alert emails at the same address.

As an added service the people behind FOCA are also offering an online Metadata service, allowing you to upload a file and receive information about the metadata stored within.

There are some interesting (anonymous ???) statistics about the files analysed that show the applications in use, as well as the common platforms and information found. Interesting is that out of 10015 analysed files, 11203 usernames were recovered (1906 company names). The statistics (Click on “show FOCA estatistics”) are worth a look if you have a spare few minutes. I’ll be taking a look at the new version and doing some further analysis when time permits.