Hi, I'am IT Security and Programming student , in my counter a mate of mine is working about Project to Kali Linux, so i decided to be Posting his tutorial so that People can have some idea about tool on Kali lot of time i saw People posting thread about How to use Kali tool .
Collect Domain, E-mail address & Document Metadata information from the Target
The Kali Linux tools grouped in this category can be used to collect domain, e-mail address, and document metadata information from the target. These tools use a search engine to do their actions. The advantage of these tools is that they use search engine sites. So, you don't access the target website yourself, instead the search engine site will do that for you. As a result, the target website will not know about your action.
Let us explore several of these tools.
theharvester
The theharvester tool is an e-mail accounts, username, and hostname/subdomains gathering tool. It collects information from various public sources. As of Version 2.2, the public sources that are supported are as follows:
• Google
• Google profiles
• Bing
• PGP
• LinkedIn
• Yandex
• People123
• Jigsaw
• Shodan
To access theharvester in Kali Linux, you can use the console and type the following command:
# theharvester
This will display the usage information and example on your screen as shown bellow.
[img]http://2.bp.blogspot.com/-RiFCl5famSY/U-tfkZFxA1I/AAAAAAAAAkM/gzJXpJ0u8ts/s1600/1.jpg[/img]
If we want to find the e-mail addresses and hostnames for a target domain using Google and limit the result to 100, the following is the appropriate command:
# theharvester -d google.com -l 100 -b google
The following e-mail addresses and hostnames are found:
[img]http://4.bp.blogspot.com/-6trl0GreNBI/U-tgt_fPK7I/AAAAAAAAAkU/HDdHONEjI9U/s1600/2.jpg[/img]
From the preceding result, we notice that we are able to get several e-mail addresses and hostnames from the Google search engine.
If we want to gather more information, let's say we want to collect the username from the target, we can use linkedin.com to do this. The following is the command for that:
# theharvester -d google.com -l 100 -b linkedin
The following is the result:
[img]http://1.bp.blogspot.com/-2lF_7FXGRNk/U-thpKSOUWI/AAAAAAAAAkc/WtR3uRohZm0/s1600/3.jpg[/img]
The preceding list of usernames collected from LinkedIn will be useful in a penetration testing step later if we want to do an attack, such as a social engineering attack
Tutorial created by : Mr Tandel :)
Collect Domain, E-mail address & Document Metadata information from the Target
The Kali Linux tools grouped in this category can be used to collect domain, e-mail address, and document metadata information from the target. These tools use a search engine to do their actions. The advantage of these tools is that they use search engine sites. So, you don't access the target website yourself, instead the search engine site will do that for you. As a result, the target website will not know about your action.
Let us explore several of these tools.
theharvester
The theharvester tool is an e-mail accounts, username, and hostname/subdomains gathering tool. It collects information from various public sources. As of Version 2.2, the public sources that are supported are as follows:
• Google profiles
• Bing
• PGP
• Yandex
• People123
• Jigsaw
• Shodan
To access theharvester in Kali Linux, you can use the console and type the following command:
# theharvester
This will display the usage information and example on your screen as shown bellow.
[img]http://2.bp.blogspot.com/-RiFCl5famSY/U-tfkZFxA1I/AAAAAAAAAkM/gzJXpJ0u8ts/s1600/1.jpg[/img]
If we want to find the e-mail addresses and hostnames for a target domain using Google and limit the result to 100, the following is the appropriate command:
# theharvester -d google.com -l 100 -b google
The following e-mail addresses and hostnames are found:
[img]http://4.bp.blogspot.com/-6trl0GreNBI/U-tgt_fPK7I/AAAAAAAAAkU/HDdHONEjI9U/s1600/2.jpg[/img]
From the preceding result, we notice that we are able to get several e-mail addresses and hostnames from the Google search engine.
If we want to gather more information, let's say we want to collect the username from the target, we can use linkedin.com to do this. The following is the command for that:
# theharvester -d google.com -l 100 -b linkedin
The following is the result:
[img]http://1.bp.blogspot.com/-2lF_7FXGRNk/U-thpKSOUWI/AAAAAAAAAkc/WtR3uRohZm0/s1600/3.jpg[/img]
The preceding list of usernames collected from LinkedIn will be useful in a penetration testing step later if we want to do an attack, such as a social engineering attack
Tutorial created by : Mr Tandel :)
![[Image: Btc2oyr.gif]](https://i.imgur.com/Btc2oyr.gif)