I will discuss the potential for using command-line OCR tools to mine documents that might otherwise be overlooked, especially in large numbers – such as scans and faxes. These documents are often overlooked because there are no searchable strings (i.e. the content is actually an image). This is a work in progress in its early stages, but I will cover some tools and some practical use of those tools within offensive scenarios (using a real world example). I will also discuss possible uses from a defensive position as well as what avenues of this approach I’d like to explore next.

Back to Derbycon 2011 video list