Client-Side Attacks

Reconnaissance

• If found file or documents, check the metadata.

  • Could find what version of software they

  • [[exiftool]]

Fingerprinting

• using CanaryToken to check target OS and system

[[Windows Library Files]] [[Exploiting Microsoft Office]]