Theharvester: Email Harvesting Throughout Year

You might have harvested many things upto now but what we are going to harvest today is something bad :)

Requirements:

1. A Linux box (I'm using Kali Linux)
2. theharvester program (already available in Kali Linux)

So what does theharvester harvest? Well it harvests email addresses. theharvester is an Information gathering tool. If you want a list of emails to spam you can get that easily from theharvester tool and go on Spamming (I'm joking its illegal). It's a security tool that helps you in pentesting an organization (as always it can be used for evil as well). You can gather emails from an organization and look for potential victims to attack or use brute-force techniques to get their passwords or Social Engineer them into doing something that will let you compromise some or all systems in the organization. Uhh there are so many things that you can do when you have access to someone's email address.

OK stop talking and start doing.

Fire up a terminal in your kali box and type this command:

theharvester -d hotmail.com -l 50 -b google

In a small amount of time you'll see your terminal flooded with 200 hotmail.com email address. What does this command mean?

theharvester is the tool name that we are using
-d <domain_name> specifies the domain (or website) who's email addresses we're looking for, in our case it was hotmail.com
-l <number> specifies the number of results that we want in the output, I limited it to 50
-b <source> specifies the source on which to look for email addresses, I specified google as the source

Besides google we can specify any of the follow as source:
google, googleCSE, bing, bingapi, pgp, linkedin, google-profiles, people123, jigsaw, twitter, googleplus, all
Here the last entry all means look in every available source.

Let's say you wanted to look in every available source they you should specify the following command:

theharvester -d hotmail.com -b all

-f is another great flag which can be utilized to save the output in case we want to SPAM them later (just kidding) or for other reasons (I'm thinking positive). -f flag saves the result in html or xml format. Let's do just that:

theharvester -d gmail.com -l 50 -b google -f emailaddresses.html

here -f flag is followed by the location where we want to store the file and the name of file, in our case we stored it in our pwd (present working directory) with the name emailaddresses.html.

Above picture shows an html output generated by harvester.

That's it for this tutorial hope to see you next time!

More articles

1. Hacking App
2. World No 1 Hacker Software
3. Pentest Tools Kali Linux
4. Hack Tools
5. What Are Hacking Tools
6. Hak5 Tools
7. Pentest Tools Subdomain
8. Wifi Hacker Tools For Windows
9. Nsa Hack Tools
10. Pentest Tools Nmap
11. New Hacker Tools
12. Pentest Tools For Windows
13. Hack Tools Github
14. Hacking Apps
15. Hacker Tools Free
16. Hacker
17. Hacker Tools For Windows
18. Pentest Tools Android
19. Pentest Tools Framework
20. Nsa Hack Tools Download
21. Hack Tools For Pc
22. Pentest Tools Android
23. Hacking Tools For Kali Linux
24. Termux Hacking Tools 2019
25. Hacking Tools Kit
26. Hacking Tools And Software
27. Install Pentest Tools Ubuntu
28. Hacker Tools List
29. Pentest Tools Website
30. Pentest Tools For Mac
31. Hacking Tools Download
32. Nsa Hack Tools
33. Hacking Tools Online
34. Underground Hacker Sites
35. Pentest Tools Website Vulnerability
36. Hack Tools For Ubuntu
37. Hack Tools
38. Hacker Tools For Pc
39. Hacking Tools Download
40. Hack Tool Apk
41. Pentest Tools Kali Linux
42. Pentest Tools For Windows
43. Hacking App
44. Pentest Tools Review
45. Hack And Tools
46. Pentest Tools Android
47. Pentest Tools Subdomain
48. Pentest Tools For Android
49. Hacking Apps
50. Android Hack Tools Github
51. Hack Tools For Mac
52. Free Pentest Tools For Windows
53. Hack Tools For Windows
54. Nsa Hack Tools
55. Hacker Search Tools
56. Tools For Hacker
57. Hacking Tools Name
58. Hacking Tools
59. Hack Tools 2019
60. Hacking Tools Kit
61. Hacking Tools Windows 10