.jpeg)
Here's a full guide on how to use `theHarvester` for email harvesting and other reconnaissance activities:
### **What is `theHarvester`?**
`theHarvester` is a tool used for gathering information from public sources. It can be used to find email addresses, domain names, and subdomains associated with a target domain.
### **Installation**
`theHarvester` is included in the default Kali Linux repositories. If you’re using another Linux distribution, you might need to install it from source or use a package manager.
**To install on Kali Linux:**
```bash
sudo apt update
sudo apt install theharvester
```
### **Basic Usage**
Here’s how to use `theHarvester` for different types of information gathering:
#### **1. Email Harvesting**
**Syntax:**
```bash
theharvester -d [domain] -b [source]
```
- `-d [domain]`: The target domain you want to gather information about.
- `-b [source]`: The search engine or data source to use.
**Example:**
```bash
theharvester -d example.com -b google
```
This command will search Google for email addresses associated with `example.com`.
#### **2. Gathering Subdomains**
**Syntax:**
```bash
theharvester -d [domain] -b [source] -s
```
- `-s`: Enables subdomain enumeration.
**Example:**
```bash
theharvester -d example.com -b google -s
```
This command will search for subdomains of `example.com` using Google.
#### **3. Using Multiple Sources**
`theHarvester` supports various sources for gathering information. You can specify multiple sources using the `-b` option.
**Syntax:**
```bash
theharvester -d [domain] -b [source1,source2,...]
```
**Example:**
```bash
theharvester -d example.com -b google,bing,linkedin
```
This command will gather email addresses and other information from Google, Bing, and LinkedIn.
### **Advanced Options**
#### **1. Limiting the Number of Results**
**Syntax:**
```bash
theharvester -d [domain] -b [source] -l [limit]
```
- `-l [limit]`: Specifies the maximum number of results to return.
**Example:**
```bash
theharvester -d example.com -b google -l 100
```
This command limits the results to 100 entries.
#### **2. Specifying the Port for Search Engine API**
**Syntax:**
```bash
theharvester -d [domain] -b [source] -p [port]
```
- `-p [port]`: Specifies a port for connecting to the search engine API.
**Example:**
```bash
theharvester -d example.com -b google -p 443
```
This specifies port 443 for HTTPS connections.
### **Output Formats**
`theHarvester` can output results in various formats:
#### **1. HTML Format**
**Syntax:**
```bash
theharvester -d [domain] -b [source] -f [file.html]
```
- `-f [file.html]`: Specifies the output file in HTML format.
**Example:**
```bash
theharvester -d example.com -b google -f results.html
```
This command saves the results in `results.html`.
#### **2. CSV Format**
**Syntax:**
```bash
theharvester -d [domain] -b [source] -f [file.csv]
```
- `-f [file.csv]`: Specifies the output file in CSV format.
**Example:**
```bash
theharvester -d example.com -b google -f results.csv
```
This command saves the results in `results.csv`.
### **Conclusion**
`theHarvester` is a powerful tool for gathering information from public sources. Use it responsibly and ensure that you have permission to collect data from the targets you are investigating. Always comply with legal and ethical guidelines when conducting information security assessments.
إرسال تعليق