ICMPECHO
  • Home
  • About

Subscribe to feed

‹ More CCTV means more security for you!  •  Mexico to register all cell phone owners ›

Extracting metadata from Office 2007 docs

December 23, 2008 in microsoft, privacy, security by Daniel Nyström | No comments

Found a short and interesting webcast on how to gather metadata such as usernames from documents created with Office 2007 over at PaulDotCom:


Hack Naked TV – Episode 2 – Office 2007 Metadata from PaulDotCom on Vimeo.

 
As you might know, the new MS Office format (.docx etc.) is based on a zipped structure of XML files. These XML files contain everything from the structure of the document, the data in it and of course the metadata of the document. Previous versions of MS Office has been known to divulge a bit too much information, and this webcast focuses on digging out user data that might be used in remote pen-testing.
 
The webcast only illustrates digging for usernames, but as we all know, more information might be hidden (even though it looks cleaner) ;)
 
Anyways, if you’re on windows and want investigate your own files you can just use WinZip, WinRAR or any other archiver to extract the files inside your .docx/.xlsx/etc-x files. XML files can be manually interpreted using notepad++, Internet Explorer or other more specialized tools.
 
Cheers,

Tags: metadata, office 2007

No comments

Comments feed for this article

Trackback link: http://www.icmpecho.com/2008/12/23/extracting-metadata-from-office-2007-docs/trackback/

Reply

Click here to cancel your reply

Recent posts

  • Tweets this week (for 2010-08-28)
  • Tweets this week (for 2010-08-21)
  • Tweets this week (for 2010-07-10)
  • Tweets this week (for 2010-07-03)
  • Tweets this week (for 2010-06-20)

Recent tweets

    • Hey CIA, keep you goddamn fingers out of Sweden PLZ... This would be hillarious if it was not so wrong.. 2 weeks ago
    • RT @Eth_x Intel McAfee acquisition is biggest, and worst, deal in security... http://lnkd.in/3TxQVa 2 weeks ago
    • 124. Tattoo parlor for pets - haha RT @unclecj: @RudolfChristian 999 affärsideer http://bit.ly/vsQyK #entrepren ¶rskap 2 weeks ago
    • More updates...

    Posting tweet...

Links

  • Creative Commons
  • Panda Labs
  • Panda Research
  • Panda Support
  • Panda Sweden Non-Tech Blog
  • Panda Sweden Tech Blog
  • The Pirate Party
  • The Pirate Party – Stockholm

Tag cloud

1.2 16 September 2009 a1 acer anti-malware aspire one censorship censur christmas conficker copyright eu fascism fra infection integrity internetdagarna ipred1 linpus linux malware massavlyssning mass surveillance microsoft music Panda Panda Security panda security days party PCI DSS piratpartiet qp security stockholm surveillance sweden telecom telecoms package the pirate bay tpb trial tweets vista övervakning


Creative Commons License

All photos and media by Daniel Nyström that is published on this site is licensed under a Creative Commons Attribution-Share Alike 2.5 Sweden License if nothing else is mentioned in the caption or description.


Creeper MediaCreeper




Subscribe to feed

Powered by WordPress and Tarski