How theHarvester works

Theharvester works by searching for information from every public sources for information regarding a particular host. This is done by scrapping for information from this sources list above.

The Kind of informaiton that this tool can get scrape include;

• Email address ( Snippet to harvest email using google search )
• Subdomains
• Ipaddresses ( Snippet to get domain ip )
• Names

Install theHarvester using pip3

You can visit theharvester

or

pip3 install theHarvester

theHarvester Modules that require an API key

• bing
• github
• hunter
• intelx
• securityTrails
• shodan
• spyse

All this api's can be configured inside  api-keys.yaml

How to setup theHarvester on ubuntu or debian with virtualenv.

sudo apt-get install python3-pip
sudo pip3 install virtualenv 

#
# Create virtualenv

virtualenv venv 

# Or create a python version specific virtualenv

virtualenv -p python3 myenv
#
# Now clone the git repo
git clone https://github.com/laramies/theHarvester.git
#
pip3 install -r requirements.txt
#
# Wait until the installation is done.

How to use theHarvester

Using theharvester is very easy after the installation to test out if your installation was successfuly try to invoke the following commands

$
$ ./theharvester.py # If you cloned from github
$ # or
$ theharvester # if you installed using pip3 install theHarvester
$
$ 
*******************************************************************
*  _   _                                            _             *
* | |_| |__   ___    /\  /\__ _ _ ____   _____  ___| |_ ___ _ __  *
* | __|  _ \ / _ \  / /_/ / _` | '__\ \ / / _ \/ __| __/ _ \ '__| *
* | |_| | | |  __/ / __  / (_| | |   \ V /  __/\__ \ ||  __/ |    *
*  \__|_| |_|\___| \/ /_/ \__,_|_|    \_/ \___||___/\__\___|_|    *
*                                                                 *
* theHarvester 3.1.1dev3                                          *
* Coded by Christian Martorella                                   *
* Edge-Security Research                                          *
* cmartorella@edge-security.com                                   *
*                                                                 *
******************************************************************* 


usage: theHarvester.py [-h] -d DOMAIN [-l LIMIT] [-S START] [-g] [-p] [-s]
                       [-v] [-e DNS_SERVER] [-t DNS_TLD] [-n] [-c]
                       [-f FILENAME] [-b SOURCE]
theHarvester.py: error: the following arguments are required: -d/--domain

Those are the options available for use with the tharvester. Now let's try to investigate google using theharvester

$
$ ./theHarvester.py -d google.com -b google
$
*******************************************************************
*  _   _                                            _             *
* | |_| |__   ___    /\  /\__ _ _ ____   _____  ___| |_ ___ _ __  *
* | __|  _ \ / _ \  / /_/ / _` | '__\ \ / / _ \/ __| __/ _ \ '__| *
* | |_| | | |  __/ / __  / (_| | |   \ V /  __/\__ \ ||  __/ |    *
*  \__|_| |_|\___| \/ /_/ \__,_|_|    \_/ \___||___/\__\___|_|    *
*                                                                 *
* theHarvester 3.1.1dev3                                          *
* Coded by Christian Martorella                                   *
* Edge-Security Research                                          *
* cmartorella@edge-security.com                                   *
*                                                                 *
******************************************************************* 


[*] Target: google.com 
 
[*] Searching Google. 
	Searching 0 results.
	Searching 100 results.
	Searching 200 results.
	Searching 300 results.
	Searching 400 results.
	Searching 500 results.

[*] No IPs found.

[*] No emails found.

[*] Hosts found: 23
---------------------
aboutme.google.com:216.58.223.110
accounts.google.com:216.58.223.109
adservice.google.com:216.58.223.98
.......

As you can see how easy it is to use theharvester you can explore fore more options.

Alternative to theHarvester