Important Information Gathering Tool on Internet -->>The Harvester it is a tool for gathering e-mail accounts, user names and hostnames/subdomains from different publicsources like search engines and PGP key servers. This tools is intended to help Penetration testers in the early stages of the project It’s a really simple tool, but very effective.The sources supported are: – Google – emails,subdomains/hostnames– Google profiles – Employee names– Bing search – emails, subdomains/hostnames,virtual hosts– Pgp servers – emails, subdomains/hostnames– Linkedin – Employee names– Exalead – emails,subdomain/hostnamesNew features:– Time delays between requests– XML and HTML results export– Search a domain in all sources– Virtual host verifier– Shodan computer database integration– Active enumeration (DNS enumeration,DNSreverse lookups, DNS TLD expansion)– Basic graph with statsSome Examples:Searching emails accounts for the domain microsoft, it willwork with the first 500 google results:./theharvester.py -d microsoft -l 500 -b googleSearching emails accounts for the domain microsoft in a PGP server, here it’s not necessary to specify the limit../theharvester.py -d microsoft -b pgpSearching for user names that works in the company microsoft, we use google as search engine, so we need to specify the limit of results we want to use:./theharvester.py -d microsoft -l 200 -b linkedinSearching in all sources at the same time, with a limit of 200 results:./theHarvester.py -d microsoft -l 200 -b allDownload https://code.google/p/theharvester
Posted on: Fri, 25 Jul 2014 10:43:32 +0000
Trending Topics
Recently Viewed Topics
© 2015