开源网络情报收割机Harvester-OSINT

开源网络情报收割机Harvester-OSINT

theHarvester是什么

theHarvester是一种非常简单易用的工具,但功能强大且有效,旨在用于
渗透测试或红队参与的早期阶段。
使用它进行开源情报(OSINT)收集可帮助确定公司在Internet上的外部威胁情况。
该工具使用多个公共数据源收集电子邮件,名称,子域,IP和URL,这些公共数据源包括如下资源.

theHarvester情报来源

需要API密钥的模块:

可以在以下位置找到设置API密钥的文档-https://github.com/laramies/theHarvester/wiki/Installation#api-keys

  • bing
  • github
  • hunter
  • intelx
  • pentesttools
  • securityTrails
  • shodan
  • spyse

theHarvester下载地址

雨苁网盘 https://w.ddosi.workers.dev/github/theHarvester/
GitHub theHarvester

theHarvester安装方法

①使用kali安装theHarvester

使用Harvester的最简单方法是使用Kali Linux。
确保您使用的是最新版本。
命令只需键入:theHarvester -h 您就可以开始使用了!

开源网络情报收割机Harvester-OSINT
开源网络情报收割机Harvester-OSINT
[email protected]:~$ theHarvester -h

*******************************************************************
*  _   _                                            _             *
* | |_| |__   ___    /\  /\__ _ _ ____   _____  ___| |_ ___ _ __  *
* | __|  _ \ / _ \  / /_/ / _` | '__\ \ / / _ \/ __| __/ _ \ '__| *
* | |_| | | |  __/ / __  / (_| | |   \ V /  __/\__ \ ||  __/ |    *
*  \__|_| |_|\___| \/ /_/ \__,_|_|    \_/ \___||___/\__\___|_|    *
*                                                                 *
* theHarvester 3.1.0                                         *
* Coded by Christian Martorella                                   *
* Edge-Security Research                                          *
* [email protected]                                   *
*                                                                 *
******************************************************************* 

 
usage: theHarvester [-h] -d DOMAIN [-l LIMIT] [-S START] [-g] [-p] [-s] [-v] [-e DNS_SERVER]
                    [-t DNS_TLD] [-n] [-c] [-f FILENAME] [-b SOURCE]

theHarvester is used to gather open source intelligence (OSINT) on a company or domain.

optional arguments:
  -h, --help            show this help message and exit
  -d DOMAIN, --domain DOMAIN
                        company name or domain to search
  -l LIMIT, --limit LIMIT
                        limit the number of search results, default=500
  -S START, --start START
                        start with result number X, default=0
  -g, --google-dork     use Google Dorks for Google search
  -p, --port-scan       scan the detected hosts and check for Takeovers (21,22,80,443,8080)
  -s, --shodan          use Shodan to query discovered hosts
  -v, --virtual-host    verify host name via DNS resolution and search for virtual hosts
  -e DNS_SERVER, --dns-server DNS_SERVER
                        DNS server to use for lookup
  -t DNS_TLD, --dns-tld DNS_TLD
                        perform a DNS TLD expansion discovery, default False
  -n, --dns-lookup      enable DNS server lookup, default False
  -c, --dns-brute       perform a DNS brute force on the domain
  -f FILENAME, --filename FILENAME
                        save the results to an HTML and/or XML file
  -b SOURCE, --source SOURCE
                        baidu, bing, bingapi, certspotter, crtsh, dnsdumpster, dogpile, duckduckgo,
                        github-code, google, hunter, intelx, linkedin, linkedin_links, netcraft, otx,
                        securityTrails, spyse(disabled for now), threatcrowd, trello, twitter, vhost,
                        virustotal, yahoo, all

②使用Docker安装theHarvester

git clone https://github.com/laramies/theHarvester 
cd theHarvester
docker build -t theharvester
docker run theharvester -h 

③从源进行安装(无Pipenv

确保您使用的是Python3.7 +

$ ~ > git clone https://github.com/laramies/theHarvester 
$ ~ > cd theHarvester

If developing do:
    $ ~ > python3 -m pip install -r requirements/dev.txt
Else:
    $ ~ > python3 -m pip install -r requirements/base.txt

$ ~ > python3 theHarvester.py -h  

④从源进行安装(有Pipenv)

git clone https://github.com/laramies/theHarvester 
cd theHarvester
python3 -m pip install pipenv
pipenv install 
pipenv shell
python3 theHarvester.py -h

API密钥

如果您想使用api,请确保编辑api-keys.yaml
api-keys.yml文件(如果使用setup.py或在kali中安装)位于/etc/theHarvester下,否则,如果已克隆git,则位于根目录中。

Harvester项目地址

GitHub https://github.com/laramies/theHarvester

Leave a Reply

您的电子邮箱地址不会被公开。 必填项已用*标注