Search...

BurpMetaFinder - Burp Suite Extension For Extracting Metadata From Files

2021-02-02T11:30:03

ID KITPLOIT:7644777557449802651
Type kitploit
Reporter KitPloit
Modified 2021-02-02T11:30:03

Description

Burp Suite extension for extracting metadata from files Currently supported documents:

PDF
DOCX
PPTX
XLSX

The project created at Jetbrains has been completely added. Don't forget to change the settings you need.

Usage

You need to dowload 2 external libraries:

To install the extension in BurpSuite, go to Extensions > Options and configure the Java Environment with the path where you save the libraries in .jar.

Finally, add to BurpSuite the .jar file located in the out/artifacts/BurpExtensionMetaFinder_jar folder. You should get a success message.

Output example

When you browse a URL that contains a pdf or docx you will see in the Dashboard something like the following:

Note: This issue was generated by the [Burp](&lt;https://www.kitploit.com/search/label/Burp&gt; "Burp" ) extension: MetaFinder.  
Issue detail

Metadata found in file: xxxx.pdf  
 * Author: root  
 * Creator: Adobe InDesign 15.0 (Macintosh)  
 * Producer: Adobe PDF [Library](&lt;https://www.kitploit.com/search/label/Library&gt; "Library" ) 15.0

The results will depend on the metadata of the documents found.

Author

This project has been developed by:

Josué Encinar García -- @JosueEncinar

Disclaimer!

This Software is a simple POC. You are free to improve it, redo it or whatever you want. Don't forget to link the original source.

Download BurpMetaFinder

JSON Vulners Source

Initial Source

{"id": "KITPLOIT:7644777557449802651", "bulletinFamily": "tools", "title": "BurpMetaFinder - Burp Suite Extension For Extracting Metadata From Files", "description": "[ ![](https://1.bp.blogspot.com/-WqTe7A_lvr8/YBjq1KCfCqI/AAAAAAAAVLw/2ndMWyscD1ELMfH1XhUiydivg974JJZQwCNcBGAsYHQ/w640-h294/metadata.png) ](<https://1.bp.blogspot.com/-WqTe7A_lvr8/YBjq1KCfCqI/AAAAAAAAVLw/2ndMWyscD1ELMfH1XhUiydivg974JJZQwCNcBGAsYHQ/s934/metadata.png>)\n\n \n\n\nBurp Suite extension for extracting metadata from files Currently supported documents: \n\n * PDF \n * DOCX \n * PPTX \n * XLSX \n\nThe project created at Jetbrains has been completely added. Don't forget to change the settings you need. \n\n \n\n\n** Usage ** \n\n\nYou need to dowload 2 external libraries: \n\n * [ pdfbox ](<https://pdfbox.apache.org/> \"pdfbox\" )\n * [ poi-ooxml ](<https://jar-download.com/artifacts/org.apache.poi/poi-ooxml> \"poi-ooxml\" )\n\nTo install the extension in BurpSuite, go to Extensions > Options and configure the Java Environment with the path where you save the libraries in .jar. \n\nFinally, add to BurpSuite the .jar file located in the out/artifacts/BurpExtensionMetaFinder_jar folder. You should get a success message. \n\n \n** Output example ** \n\n\nWhen you browse a URL that contains a pdf or docx you will see in the [ Dashboard ](<https://www.kitploit.com/search/label/Dashboard> \"Dashboard\" ) something like the following: \n \n \n Note: This issue was generated by the [Burp](<https://www.kitploit.com/search/label/Burp> \"Burp\" ) extension: MetaFinder. \n Issue detail \n \n Metadata found in file: xxxx.pdf \n * Author: root \n * Creator: Adobe InDesign 15.0 (Macintosh) \n * Producer: Adobe PDF [Library](<https://www.kitploit.com/search/label/Library> \"Library\" ) 15.0 \n \n\nThe results will depend on the metadata of the documents found. \n\n \n** Author ** \n\n\nThis project has been developed by: \n\n * ** Josu\u00e9 Encinar Garc\u00eda ** \\-- [ @JosueEncinar ](<https://twitter.com/JosueEncinar> \"@JosueEncinar\" )\n \n** Disclaimer! ** \n\n\nThis Software is a simple POC. You are free to improve it, redo it or whatever you want. Don't forget to link the original source. \n\n \n \n\n\n** [ Download BurpMetaFinder ](<https://github.com/Josue87/BurpMetaFinder> \"Download BurpMetaFinder\" ) **\n", "published": "2021-02-02T11:30:03", "modified": "2021-02-02T11:30:03", "cvss": {"score": 0.0, "vector": "NONE"}, "href": "http://www.kitploit.com/2021/02/burpmetafinder-burp-suite-extension-for.html", "reporter": "KitPloit", "references": ["https://github.com/Josue87/BurpMetaFinder"], "cvelist": [], "type": "kitploit", "lastseen": "2021-02-02T15:39:45", "edition": 1, "viewCount": 63, "enchantments": {"dependencies": {"references": [], "modified": "2021-02-02T15:39:45", "rev": 2}, "score": {"value": 0.2, "vector": "NONE", "modified": "2021-02-02T15:39:45", "rev": 2}, "vulnersScore": 0.2}, "toolHref": "https://github.com/Josue87/BurpMetaFinder"}