1 / 7

NMAPPER Best opensource OSINT TOOL

theHarvester is a very simple to use, yet powerful and effective tool designed to be used in the early statges of au000bpenetration test or red team engagement

latestrelease
Download Presentation

NMAPPER Best opensource OSINT TOOL

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript

  1. NMAPPER Best opensource OSINT TOOL TheHarvester opensource Intelligence tool

  2. Features of theHarvester • Names • Email finder https://www.nmmapper.com/kalitools/theharvester/email-harvester-tool/online/ • Virtual host scanner • Port scanner https://www.nmmapper.com/st/networkmapper/nmap/online-port-scanning/ • Ip address finder • Subdomain takeover • Subdomain finder https://www.nmmapper.com/sys/tools/subdomainfinder/ • Over 23+ public engine • Proxy support • URL

  3. What is theHarvester • theHarvester is a very simple to use, yet powerful and effective tool designed to be used in the early statges of apenetration test or red team engagement. Use it for open source intelligence (OSINT) gathering to help determine acompany's external threat landscape on the internet. The tool gathers emails, names, subdomains, IPs and URLs usingmultiple public data sources.

  4. Passive Public source used by theHarvester • baidu: Baidu search engine • bing: Microsoft search engine • bingapi: Microsoft search engine, through the API (Requires an API key, see below.) • Bufferoverun: Uses data from Rapid7's Project Sonar • CertSpotter: Cert Spotter monitors Certificate Transparency logs • crtsh: Comodo Certificate search • dnsdumpster: DNSdumpster search engine - dnsdumpster.com • dogpile: Dogpile search engine • duckduckgo: DuckDuckGo search engine • Exalead: a Meta search engine • github-code: GitHub code search engine (Requires a GitHub Personal Access Token, see below.) • google: Google search engine (Optional Google dorking.) • hunter: Hunter search engine (Requires an API key, see below.) • intelx: Intelx search engine (Requires an API key, see below.) • linkedin: Google search engine, specific search for LinkedIn users

  5. Passive public sources(CONTINUED) • netcraft: Internet Security and Data Mining • otx: AlienVault Open Threat Exchange - otx.alienvault.com • securityTrails: Security Trails search engine, the world's largest repository of historical DNS data(Requires an API key, see below.) • shodan: Shodan search engine, will search for ports and banners from discovered hosts • Spyse: Web research tools for professionals (Requires an API key.) - spyse.com • Suip: Web research tools that can take over 10 minutes to run, but worth the wait - suip.biz • threatcrowd: Open source threat intelligence • trello: Search trello boards (Uses Google search.) • twitter: Twitter accounts related to a specific domain (Uses Google search.) • vhost: Bing virtual hosts search • virustotal: virustotal.com domain search • yahoo: Yahoo search engine

  6. Installing theHarvester • Pip3 install theHarvester • Or git clone https://github.com/laramies/theHarvester.git

  7. How to use theHarvester ./ theHarvester.py -d google.com -b google

More Related