Skip to main content

Host's Information Gathering In Linux


Information Gathering Using Harvester In Linux

Tool To Be Used: Harvester

Today we will learn about Information Gathering using theHarvester in Kali Linux. Good information gathering can make the difference between a successful penetration test and one that has failed to provide maximum benefit to the client.

TheHarvester has been developed in Python by Christian Martorella. It is a tool which provides us information about e-mail accounts, user names and hostnames/subdomains from different public sources like search engines and PGP key server.

This tool is designed to help the penetration tester on an earlier stage; it is an effective, simple and easy to use.

The sources supported are:

Google – emails, subdomains

Google profiles – Employee names

Bing search – emails, subdomains/hostnames, virtual hosts

Pgp servers – emails, subdomains/hostnames

LinkedIn – Employee names

Exalead – emails, subdomain/hostnames

New features:

Time delays between requests

XML results export

Search a domain in all sources

Virtual host verifier

Let’s get started,

If you are using Kali Linux, open the terminal and type theharvester

If not then it can be easily downloaded from here: https://github.com/laramies/theHarvester

Simply Download and extract it

Provide execute permission to: theHarvester.py by [chmod 755 theHavester.py]

Then simply run  ./theharvester

You will see similar to this:

Here I am using kali linux.

Method:1

You can simply use the command theHarvester -d [url] -l 300 -b [search engine name]

For example: theHarvester -d sixthstartech.com -l 300 -b google

Which will result as in the screenshot below:

Method:2

To get all the information about the website u can use the command as:

theHarvester -d sixthstartech.com -l 300 -b all

Which will result as:

Method:3

To save the result in HTML file you can use –f option followed by a file name,

Example:

theHarvester.py -d sixthstartech.com -l 300 -b all -f test

The result in HTML File:

That’s it and hoped this helped you!!


Share To Your Friends And Learn Together With Us



Labels:

Comments

Post a Comment

Popular posts from this blog

What is BLACK WINDOWS 10 V2 windows based penetration testing os,and what are its features.Download link inside

                         Black Windows 10 V2
Post a Comment
Load more »

Mandiant Discloses Critical Vulnerability Affecting Millions of IoT Devices

Today, Mandiant disclosed a critical risk vulnerability in coordination with the Cybersecurity and Infrastructure Security Agency (“CISA”) that affects millions of IoT devices that use the ThroughTek “Kalay” network. This vulnerability, discovered by researchers on Mandiant’s Red Team in late 2020, would enable adversaries to remotely compromise victim IoT devices, resulting in the ability to listen to live audio, watch real time video data, and compromise device credentials for further attacks based on exposed device functionality. These further attacks could include actions that would allow an adversary to remotely control affected devices. At the time of writing this blog post, ThroughTek advertises having more than 83 million active devices and over 1.1 billion monthly connections on their platform. ThroughTek’s clients include IoT camera manufacturers, smart baby monitors, and Digital Video Recorder (“DVR”) products. Unlike the vulnerability published by researchers from Nozomi Ne...
Post a Comment
Load more »