Login Register




The stories and information posted here are artistic works of fiction and falsehood. Only a fool would take anything posted here as fact.


Theharvester - Compilation of Information filter_list
Author
Message
Theharvester - Compilation of Information #1
The objective of this program is to gather emails, subdomains, hosts, employee names, open ports and banners from different public sources like search engines, PGP key servers and SHODAN computer database.

This tool is intended to help Penetration testers in the early stages of the penetration test in order to understand the customer footprint on the Internet. It is also useful for anyone that wants to know what an attacker can see about their organization.

This is a complete rewrite of the tool with new features like:

Time delays between request
All sources search
Virtual host verifier
Active enumeration (DNS enumeration, Reverse lookups, TLD expansion)
Integration with SHODAN computer database, to get the open ports and banners
Save to XML and HTML
Basic graph with stats
New sources

The tool is on Kali linux:

Code:
root@ZanGetsu:~# theharvester

[Image: 12d64d34ee630fb05dc401cd9a374ba0.png]

Example usage:

Code:
root@ZanGetsu:~# theharvester -d google.cl -l 500 -b google

[Image: 45ba5b86edbebaf12fe78ff1e31c69a4.png]

if not have kali: Download
Reggards!
[Image: Vs4P58c.png]

Reply

RE: Theharvester - Compilation of Information #2
The harvester is an interesting program. Usually hasn't given me any decent info however. Usually you have to SE this kind of info or look manually for the stuff. I think the most useful tool here was the spidering bit but there's literal shit tons of those.
Scientia potentia est

[Image: inkexplosion.jpg]

Reply

RE: Theharvester - Compilation of Information #3
I've used this a number of times and depending on the source etc, It does gather some Interesting results.

Not always equally effective, but some Information (gathered) Is better than none.
[Image: AD83g1A.png]

Reply