Extracting metadata from Office 2007 docs
December 23, 2008 in microsoft, privacy, security by Daniel Nyström | No comments
Found a short and interesting webcast on how to gather metadata such as usernames from documents created with Office 2007 over at PaulDotCom:
Hack Naked TV – Episode 2 – Office 2007 Metadata from PaulDotCom on Vimeo.
As you might know, the new MS Office format (.docx etc.) is based on a zipped structure of XML files. These XML files contain everything from the structure of the document, the data in it and of course the metadata of the document. Previous versions of MS Office has been known to divulge a bit too much information, and this webcast focuses on digging out user data that might be used in remote pen-testing.
The webcast only illustrates digging for usernames, but as we all know, more information might be hidden (even though it looks cleaner)
Anyways, if you’re on windows and want investigate your own files you can just use WinZip, WinRAR or any other archiver to extract the files inside your .docx/.xlsx/etc-x files. XML files can be manually interpreted using notepad++, Internet Explorer or other more specialized tools.
Cheers,
Tags: metadata, office 2007
Recent posts
- Tweets this week (for 2010-08-28)
- Tweets this week (for 2010-08-21)
- Tweets this week (for 2010-07-10)
- Tweets this week (for 2010-07-03)
- Tweets this week (for 2010-06-20)
Recent tweets
- Hey CIA, keep you goddamn fingers out of Sweden PLZ... This would be hillarious if it was not so wrong.. 2 weeks ago
- RT @Eth_x Intel McAfee acquisition is biggest, and worst, deal in security... http://lnkd.in/3TxQVa 2 weeks ago
- 124. Tattoo parlor for pets - haha RT @unclecj: @RudolfChristian 999 affärsideer http://bit.ly/vsQyK #entrepren ¶rskap 2 weeks ago
- More updates...
Posting tweet...
Links
- Creative Commons
- Panda Labs
- Panda Research
- Panda Support
- Panda Sweden Non-Tech Blog
- Panda Sweden Tech Blog
- The Pirate Party
- The Pirate Party – Stockholm
Tag cloud
1.2 16 September 2009 a1 acer anti-malware aspire one censorship censur christmas conficker copyright eu fascism fra infection integrity internetdagarna ipred1 linpus linux malware massavlyssning mass surveillance microsoft music Panda Panda Security panda security days party PCI DSS piratpartiet qp security stockholm surveillance sweden telecom telecoms package the pirate bay tpb trial tweets vista övervakning
All photos and media by Daniel Nyström that is published on this site is licensed under a Creative Commons Attribution-Share Alike 2.5 Sweden License if nothing else is mentioned in the caption or description.



No comments
Comments feed for this article
Trackback link: http://www.icmpecho.com/2008/12/23/extracting-metadata-from-office-2007-docs/trackback/