FOCA

If you're curious about what's hiding behind a website, FOCA is one of those tools that can give you a surprisingly detailed look. It works by digging into the metadata of documents linked to a site stuff like Word files, PDFs, spreadsheets, and presentations. Think of it as digital detective work: even if a file isn’t meant to be public, FOCA can often find it and reveal secrets you didn’t know were there.

Using FOCA is pretty straightforward. You just point it at a website, hit the "Search All" button, and it scours search engines like Google, Bing, and Exalead to find documents related to that site. It supports a wide range of formats everything from .DOC and .PDF to .XLSX and even OpenOffice files like .ODT. Once it’s gathered what it can find, it downloads the documents and pulls out all the hidden metadata.

What kind of info are we talking about? Well, depending on how the documents were created, you might uncover usernames, network paths, shared folders, printer names, and even email addresses. Sometimes you stumble upon internal project details or sensitive directory structures things that really shouldn’t be exposed. For security testers, this is gold. For attackers, it’s a shortcut to planning their next move.

After collecting everything, FOCA neatly organizes the findings into a clean, easy to read report. You don’t need to be a tech expert to understand it the tool breaks down what it found and why it might matter. Whether you're shoring up your own site’s defenses or performing a penetration test, FOCA helps turn hidden clues into actionable insights.