[Exploits]

Hey guys, so i thought that i would make a quick email harvester Tut since i noticed there isn't one

this is a good method to put together random email lists, or even to take it a step further and attack certain organizations!!
If we chose option #2 which im guessing will get the popular vote lol
We will have to set the domain to their company site and extract emails from bing, yahoo and google!!!
wondering how this will help us? because we can then send our malicious files to a member of the company.
praying one of them is either stupid or does not care very much about there job :lol:

For Tut purposes I will use gmail.com as the targeted domain

so first off start up Metasploit and enter the command: use gather/search_email_collector
if you want to see what preferences you have selected type show options.
set domain to gmail.com (or whatever)

then simply type run and you are harvesting emails from google, bing and yahoo as you can see i have a nice little list going




note: if you decide to try and target an organization the chances are your list will be quite short and it dosnt take a genius to figure out which emails are employees
very simple little trick that can be quite useful
Hope this is helpful!!!!

[Exploits]

Hey guys, so i thought that i would make a quick email harvester Tut since i noticed there isn't one

this is a good method to put together random email lists, or even to take it a step further and attack certain organizations!!
If we chose option #2 which im guessing will get the popular vote lol
We will have to set the domain to their company site and extract emails from bing, yahoo and google!!!
wondering how this will help us? because we can then send our malicious files to a member of the company.
praying one of them is either stupid or does not care very much about there job :lol:

For Tut purposes I will use gmail.com as the targeted domain

so first off start up Metasploit and enter the command: use gather/search_email_collector
if you want to see what preferences you have selected type show options.
set domain to gmail.com (or whatever)

then simply type run and you are harvesting emails from google, bing and yahoo as you can see i have a nice little list going




note: if you decide to try and target an organization the chances are your list will be quite short and it dosnt take a genius to figure out which emails are employees
very simple little trick that can be quite useful
Hope this is helpful!!!!

[Ex094]

Nice tutorial, In my opinion Jigsaw is the best tool to target organization employee emails.

[Ex094]

Nice tutorial, In my opinion Jigsaw is the best tool to target organization employee emails.

[Exploits]

Nice tutorial, In my opinion Jigsaw is the best tool to target organization employee emails.

thanks for the feedback and i will definitely check jigsaw out!!!
to be honest i have never heard of it, so im already excited lol

[Exploits]

Nice tutorial, In my opinion Jigsaw is the best tool to target organization employee emails.

thanks for the feedback and i will definitely check jigsaw out!!!
to be honest i have never heard of it, so im already excited lol

[Ex094]

@Exploits You can check it out here http://www.hackingdna.com/2012/09/jigsaw...ck-5.html#!, It's a great tool and far more better than The Harvester (I guess )

[Ex094]

@Exploits You can check it out here http://www.hackingdna.com/2012/09/jigsaw...ck-5.html#!, It's a great tool and far more better than The Harvester (I guess )

[p0iz0ner]

That is the thing I never expected from metasploit but this guy has really told me. thankx.

[Exploits]

That is the thing I never expected from metasploit but this guy has really told me. thankx.

No problem man im glad it helped moke: