[frank3nstien]

Hi All,

Today we will find out about Information Gathering utilizing theHarvester in Kali Linux. Great data information gathering can have the effect between a great penetration test and one that has neglected to give most extreme advantage to the you.

It is a tool which provides us information about e-mail accounts, user names and hostnames/subdomains from different public sources like search engines and PGP key server.

This tool is designed to help the penetration tester on an earlier stage; it is an effective, simple and easy to use. The sources supported are:

• Google – emails, subdomains
  
• Google profiles – Employee names
  
• Bing search – emails, subdomains/hostnames, virtual hosts
  
• Pgp servers – emails, subdomains/hostnames
  
• LinkedIn – Employee names
  
• Exalead – emails, subdomain/hostnames
  

Let’s Begin,

If you are using Kali Linux, open the terminal and type theharvester, If not then it can be easily downloaded from here: https://github.com/laramies/theHarvester

Simply Download and extract it, Provide execute permission to:

Code

theHarvester.py by [chmod 755 theHavester.py]

Then simply run  

Code

./theharvester

You will see similar to this:
Spoiler (Click to View)
I am using kali linux Here :
Method 0x00 :
You can simply use the command

Code

theHarvester -d [url] -l 300 -b [search engine name]

For example:

Code

theHarvester -d sixthstartech.com -l 300 -b google

Which will result as in the screenshot below:
Spoiler (Click to View)
Method 0x01 :
To get all the information about the website u can use the command as:

Code

theHarvester -d sixthstartech.com -l 300 -b all

Which will result as:
Spoiler (Click to View)
Method 0x02 :
To save the result in HTML file you can use –f option followed by a file name
Example:

Code

theHarvester.py -d sixthstartech.com  -l 300 -b all -f test

Spoiler (Click to View)
The result in HTML File:
Spoiler (Click to View)

Thank you, Hope it will Help you