4 ms·
TheHarvester: Emails, subdomains and names harvester for OSINT
- nubb 5y agoI've used TH on many engagements as a starting point for osint. great tool that does a pretty decent job of collecting initial info.
- etaioinshrdlu 5y agoI just gave it a try and it did not work very well. I'm sure it could be useful for some cases, but it does far worse than a human can do scraping search engines.
- anigbrowl 5y agoThere's also Spiderfoot, which does quite a good job.
- altdataseller 5y agoCan some of these tools and methods be considered unauthorized access to servers? For instance, subdomain enumeration can often accessing an URL that isn’t meant to be accessed by the public and isn’t linked anywhere.
- rovr138 5y agoI wonder how this is affected by the last ruling, “US Supreme Court Restricts Scope of Computer Fraud and Abuse Act [pdf]” - https://news.ycombinator.com/item?id=27382752 https://news.ycombinator.com/item?id=27382752 - from a couple days ago. If they don’t block access to the service, what rights do you have to read headers sent from the server?
- bigiain 5y agoIf I enumerate your sub domains using Google or Cloudflare’s public dns servers, what unauthorised access took place? I don’t need to make an http(s) request to find out if a sub domain exists (except perhaps when you’re using wildcard sub domains).
- jnwatson 5y agoA related tool: https://github.com/OWASP/Amass https://github.com/OWASP/Amass
- sbmthakur 5y agoassetfinder from Tomnomnom is a great tool for sub-domain enumeration: https://github.com/tomnomnom/assetfinder https://github.com/tomnomnom/assetfinder