Metasploit Email Harvester - Printable Version

Metasploit Email Harvester - Printable Version

+- Sinisterly (https://sinister.li)
+-- Forum: Hacking (https://sinister.li/Forum-Hacking)
+--- Forum: Tutorials (https://sinister.li/Forum-Tutorials)
+--- Thread: Metasploit Email Harvester (/Thread-Metasploit-Email-Harvester)

Pages: 1 2

Metasploit Email Harvester - Exploits - 03-28-2013

Hey guys, so i thought that i would make a quick email harvester Tut since i noticed there isn't one Wink

this is a good method to put together random email lists, or even to take it a step further and attack certain organizations!!
If we chose option #2 which im guessing will get the popular vote Wink

lol
We will have to set the domain to their company site and extract emails from bing, yahoo and google!!!
wondering how this will help us? because we can then send our malicious files to a member of the company.
praying one of them is either stupid or does not care very much about there job :lol:

For Tut purposes I will use gmail.com as the targeted domain

so first off start up Metasploit and enter the command: use gather/search_email_collector
if you want to see what preferences you have selected type show options.
set domain to gmail.com (or whatever)
[Image: Workspace1_007_zps7a990471.png]

then simply type run and you are harvesting emails from google, bing and yahoo Wink

as you can see i have a nice little list going

[Image: Workspace1_008_zps9dc3b950.png]

note: if you decide to try and target an organization the chances are your list will be quite short and it dosnt take a genius to figure out which emails are employees Cool

very simple little trick that can be quite useful
Hope this is helpful!!!!

Metasploit Email Harvester - Exploits - 03-28-2013

Hey guys, so i thought that i would make a quick email harvester Tut since i noticed there isn't one Wink

this is a good method to put together random email lists, or even to take it a step further and attack certain organizations!!
If we chose option #2 which im guessing will get the popular vote Wink

then simply type run and you are harvesting emails from google, bing and yahoo Wink

as you can see i have a nice little list going

[Image: Workspace1_008_zps9dc3b950.png]

note: if you decide to try and target an organization the chances are your list will be quite short and it dosnt take a genius to figure out which emails are employees Cool

very simple little trick that can be quite useful
Hope this is helpful!!!!

RE: Metasploit Email Harvester - Ex094 - 03-28-2013

Nice tutorial, In my opinion Jigsaw is the best tool to target organization employee emails.

RE: Metasploit Email Harvester - Exploits - 03-28-2013

(03-28-2013, 08:38 AM)Ex094 Wrote: Nice tutorial, In my opinion Jigsaw is the best tool to target organization employee emails.

thanks for the feedback Wink

and i will definitely check jigsaw out!!!
to be honest i have never heard of it, so im already excited lol

RE: Metasploit Email Harvester - Exploits - 03-28-2013

(03-28-2013, 08:38 AM)Ex094 Wrote: Nice tutorial, In my opinion Jigsaw is the best tool to target organization employee emails.

thanks for the feedback Wink

and i will definitely check jigsaw out!!!
to be honest i have never heard of it, so im already excited lol

RE: Metasploit Email Harvester - Ex094 - 03-28-2013

@Exploits You can check it out here http://www.hackingdna.com/2012/09/jigsaw-on-backtrack-5.html#!, It's a great tool and far more better than The Harvester (I guess )

RE: Metasploit Email Harvester - p0iz0ner - 04-02-2013

That is the thing I never expected from metasploit but this guy has really told me. thankx.

RE: Metasploit Email Harvester - Exploits - 04-02-2013

(04-02-2013, 08:55 PM)p0iz0ner Wrote: That is the thing I never expected from metasploit but this guy has really told me. thankx.

No problem man im glad it helped Confused

moke: