+- Sinisterly (https://sinister.li)
+-- Forum: Hacking (https://sinister.li/Forum-Hacking)
+--- Forum: Hacking Tools (https://sinister.li/Forum-Hacking-Tools)
+--- Thread: Theharvester - Compilation of Information (/Thread-Theharvester-Compilation-of-Information)
Theharvester - Compilation of Information - ZanGetsu - 09-09-2017
The objective of this program is to gather emails, subdomains, hosts, employee names, open ports and banners from different public sources like search engines, PGP key servers and SHODAN computer database.
This tool is intended to help Penetration testers in the early stages of the penetration test in order to understand the customer footprint on the Internet. It is also useful for anyone that wants to know what an attacker can see about their organization.
This is a complete rewrite of the tool with new features like:
Time delays between request
All sources search
Virtual host verifier
Active enumeration (DNS enumeration, Reverse lookups, TLD expansion)
Integration with SHODAN computer database, to get the open ports and banners
Save to XML and HTML
Basic graph with stats
New sources
The tool is on Kali linux:
Code:
root@ZanGetsu:~# theharvester![[Image: 12d64d34ee630fb05dc401cd9a374ba0.png]](https://i.gyazo.com/12d64d34ee630fb05dc401cd9a374ba0.png)
Example usage:
Code:
root@ZanGetsu:~# theharvester -d google.cl -l 500 -b google![[Image: 45ba5b86edbebaf12fe78ff1e31c69a4.png]](https://i.gyazo.com/45ba5b86edbebaf12fe78ff1e31c69a4.png)
if not have kali: Download
Reggards!
Reggards!
RE: Theharvester - Compilation of Information - DarkMuse - 09-11-2017
The harvester is an interesting program. Usually hasn't given me any decent info however. Usually you have to SE this kind of info or look manually for the stuff. I think the most useful tool here was the spidering bit but there's literal shit tons of those.
RE: Theharvester - Compilation of Information - mothered - 09-11-2017
I've used this a number of times and depending on the source etc, It does gather some Interesting results.
Not always equally effective, but some Information (gathered) Is better than none.