theharvester

Tool for gathering e-mail accounts and subdomain names from public sources
The package contains a tool for gathering subdomain names, e-mail addresses, virtual hosts, open ports/ banners, and employee names from different public sources (search engines, pgp key servers).

Installed size: 2.24 MB
How to install: sudo apt install theharvester

restfulHarvest

root@kali:~# restfulHarvest -h
usage: restfulHarvest [-h] [-H HOST] [-p PORT] [-l LOG_LEVEL] [-r]
                      [--rate-limit RATE_LIMIT]

options:
  -h, --help            show this help message and exit
  -H, --host HOST       IP address to listen on default is 127.0.0.1
  -p, --port PORT       Port to bind the web server to, default is 5000
  -l, --log-level LOG_LEVEL
                        Set logging level, default is info but
                        [critical|error|warning|info|debug|trace] can be set
  -r, --reload          Enable automatic reload used during development of the
                        api
  --rate-limit RATE_LIMIT
                        Set API rate limit (e.g., "10/minute", "100/hour"),
                        default is 5/minute

theHarvester

root@kali:~# theHarvester -h
Read proxies.yaml from /etc/theHarvester/proxies.yaml
*******************************************************************
*  _   _                                            _             *
* | |_| |__   ___    /\  /\__ _ _ ____   _____  ___| |_ ___ _ __  *
* | __|  _ \ / _ \  / /_/ / _` | '__\ \ / / _ \/ __| __/ _ \ '__| *
* | |_| | | |  __/ / __  / (_| | |   \ V /  __/\__ \ ||  __/ |    *
*  \__|_| |_|\___| \/ /_/ \__,_|_|    \_/ \___||___/\__\___|_|    *
*                                                                 *
* theHarvester 4.10.1                                             *
* Coded by Christian Martorella                                   *
* Edge-Security Research                                          *
* [email protected]                                   *
*                                                                 *
*******************************************************************
usage: theHarvester [-h] -d DOMAIN [-l LIMIT] [-S START] [-p] [-s]
                    [--screenshot SCREENSHOT] [-e DNS_SERVER] [-t]
                    [-r [DNS_RESOLVE]] [-n] [-c] [-f FILENAME] [-w WORDLIST]
                    [-a] [-q] [-b SOURCE]

theHarvester is used to gather open source intelligence (OSINT) on a company
or domain.

options:
  -h, --help            show this help message and exit
  -d, --domain DOMAIN   Company name or domain to search.
  -l, --limit LIMIT     Limit the number of search results, default=500.
  -S, --start START     Start with result number X, default=0.
  -p, --proxies         Use proxies for requests, enter proxies in
                        proxies.yaml.
  -s, --shodan          Use Shodan to query discovered hosts.
  --screenshot SCREENSHOT
                        Take screenshots of resolved domains specify output
                        directory: --screenshot output_directory
  -e, --dns-server DNS_SERVER
                        DNS server to use for lookup.
  -t, --take-over       Check for takeovers.
  -r, --dns-resolve [DNS_RESOLVE]
                        Perform DNS resolution on subdomains with a resolver
                        list or passed in resolvers, default False.
  -n, --dns-lookup      Enable DNS server lookup, default False.
  -c, --dns-brute       Perform a DNS brute force on the domain.
  -f, --filename FILENAME
                        Save the results to an XML and JSON file.
  -w, --wordlist WORDLIST
                        Specify a wordlist for API endpoint scanning.
  -a, --api-scan        Scan for API endpoints.
  -q, --quiet           Suppress missing API key warnings and reading the api-
                        keys file.
  -b, --source SOURCE   baidu, bevigil, bitbucket, brave, bufferoverun,
                        builtwith, censys, certspotter, chaos, commoncrawl,
                        criminalip, crtsh, dehashed, dnsdumpster, duckduckgo,
                        fofa, fullhunt, github-code, gitlab, hackertarget,
                        haveibeenpwned, hudsonrock, hunter, hunterhow, intelx,
                        leakix, leaklookup, netlas, onyphe, otx, pentesttools,
                        projectdiscovery, rapiddns, robtex, rocketreach,
                        securityscorecard, securityTrails, shodan,
                        subdomaincenter, subdomainfinderc99, thc, threatcrowd,
                        tomba, urlscan, venacus, virustotal, waybackarchive,
                        whoisxml, windvane, yahoo, zoomeye

theharvester

root@kali:~# theharvester -h
┏━(Message from Kali developers)
┃
┃ The command theharvester is deprecated. Please use theHarvester instead.
┃
┗━

Learn more with OffSec

Want to learn more about theharvester? get access to in-depth training and hands-on labs:

• PEN-200: 12.1.1. Client-side Attacks: Information Gathering
• MITRE ATT&CK - Resource Development (TA0042): 2.1.2. Client-side Attacks: Client Fingerprinting
• SEC-100: 19.1.2. Information Gathering and Enumeration: Client Fingerprinting

PEN-200 course

SEC-100 course