'theHarvester' is a tool designed to be used in Information Gathering Phase of a penetration testing.
theHarvester is a tool used to harvest/gather sensitive information that can help in determining a company's external threat landscape on the internet. Not just company but even individual information of particular users available on the internet. 'theHarvester' largely depends on public sources and the following info can be gathered,
- Emails
- Names
- Subdomains
- IPs
- URLs
- VirtualHosts
- Even Port Scanning
TheHarvester Public engine
One of the interesting things about ‘theHarvester’ is that it supports more than one public source to harvest information. These sources appear to be more than 20+ public sources supported by the information gathering tool.
And this public sources that require API include:
- SecurityTrails
- Hunter
- GitHub
- Shodan
- bingapi
- Spyse
- Intelx
Harvester on ubuntu/other linux based system where its not preinstalled
You just have to have some major dependencies on the system particular python3.6+. Some of its major dependencies include:
⦁ Python 3.7+⦁ Python3 -m pip install pipenv
⦁ Pipenv install
virtualenv -p python3 theharvester
git clone https://github.com/laramies/theHarvester.git
Source theharvester/bin/activate
No comments:
Post a Comment