[Hack3rcon]

Hello,
How can I find the email addresses of a domain manually? I know a tool like "theHarvester", but I want to find the email address with other tools like Telnet.

Thank you.

[DedSpace]

Have you used the Discover scripts? It does use theHarvester, but it does a lot more OSINT.

https://github.com/leebaird/discover

If you would like to write your own you probably could with your browser using a google dork such as "intext:@Domain.com" if you are targeting a specific domain then you can use this search query url in curl and then extract all the links in the results using grep to write out to a file then read from this using curl to open them and again use grep to extract the emails using regular expressions. Long winded but it should work.

EDIT: I accidentally tagged a user and did not mean to. My apologies.