FOCA is a tool for extracting information in footprinting and fingerprinting phases during a penetration test. It helps auditors to extract and analyze information from metadata, hidden info and lost data in published files. This new release of FOCA, version 2.5, adds automatic tools for scanning internal domains using PTR Scanning, Serach Engines, DNS Cache Snooping, Software recognition through SHODAN, etc… It allows in detecting remotely AV installed, vulnerable sw to evilgrade and to prepare a targeted attack externally. The idea of FOCA is to give as much info as can be discovered automatically starting from a public domain name… and just clicking 1 button.