How To Collect Email Addresses from Websites

The information gathering steps of  footprinting  and scanning are the most importance before hacking. Good information gathering can make the difference between a successful penetration test and one that has failed to provide maximum benefit to the client.
We can say that Information is a weapon, a successful penetration testing and a hacking process need a lots of relevant information that is why, information gathering so called foot printing is the first step of hacking. So, gathering valid login names and emails are one of the most important parts for penetration testing.
TheHarvester has been developed in Python by Christian Martorella. It is a tool which provides us information of about e-mail accounts, user names and hostnames/subdomains from different public sources like search engines and PGP key server.
This tool is designed to help the penetration tester on an earlier stage; it is an effective, simple and easy to use. The sources supported are:
Google – emails, subdomains/hostnames
Google profiles – Employee names
Bing search – emails, subdomains/hostnames, virtual hosts
Pgp servers – emails, subdomains/hostnames
LinkedIn – Employee names
Exalead – emails, subdomain/hostnames
New features:
Time delays between requests
XML results export
Search a domain in all sources
Virtual host verifier
Getting Started:
If you are using kali linux, go the terminal and use the commandtheharvester.
In case, if it is not available in your distribution, than you can easily download it from, simply download it and extract it.
Provide execute permission to the by [chmod 755]
After getting in to that, simply run. /theharvester, it will display version and other option that can be used with this tool with detailed description.

From above information of email address we can identify pattern of the email addresses assigned to the employees of the organization.

Also Read:  How To Spot A Scam / Phishing Website

using HARVESTER to collect email addresses
This command will grab the information from multiple search engines supported by the specific version of theHarvester.
Save the result in HTML file. Command: 

To save results in html file -f parameter is used as shown in this example.
image: saving harvester results

Saving harvester results in HTML file


Please comment and share.

Request for any tutorial and we will provide it in few hours… thanks

Loading… How to prevent theharvester from your website.

Iyanu Victor (BobodY) is a Student by appearance, Technology lover by heart and a Blogger by mind. He started blogging in 2015 and he has been surviving with your help. Thanks
This post was last modified on June 11, 2016

Leave a Comment

Your email address will not be published. Required fields are marked *