Hello everybody and welcome back.
And in this tutorial we'll go cover the e-mail harvesting tool which is called basically the harvester.
So intellect material.
I checked out if the if we have it installed already and we do so we'll just located and we will run
it because I already tried to run it from here harvest and it just doesn't work so pledges to locate
it first.
We can see that it is stored in this directory.
Users shared goals mirror too.
So we will just go through that directory
and we can see here a bunch of programs out a bunch of a few programs and we will change our entry to
the harvester.
So if we type here change directory harvester we can see the right here we have an executable file python
file which we will run in order to run this program.
Now let me just enlarge this program and I just want to tell you that this program basically doesn't
work from time to time.
So for example once I run it it might print out printers the e-mails and it might not because I run
this a bunch of times on the same Web site and it sometimes just finds a lot of things and sometimes
she just doesn't find anything.
So if we just run this program it will show us an error and it will say the domain search is mandatory
so we basically need to specify our domain Web site.
So let me just type here.
The hap option which is the harvester dash help and it will show us our available options.
Here we can see that the minus 3 is basically specifying the domain domain or company name to search
for the minus B is engine.
So it will basically serve the search engine.
So it will by default be Google as it says right here.
And we want to leave it on that since I believe Google is the best.
And here we can have the minus URL which is also an import adoption which stands for limit.
It will limit the number of results to work with.
So basically if you just type here the 200 it will print it will search for the first 200 results and
it will show us the e-mails and hosts from those two hundred.
Now we can try these examples right here.
So it will just copy the first one let's just use mind as the Microsoft dot com minus called for the
results number which we will set to 500 then minus B in all in order for it to be Google so let's just
try this.
It will take a few seconds.
It might find something and it might not.
Basically if it doesn't find anything you can try using the same command later on and it would probably
work.
It just decides from time to time when it will find them and it will not.
So if it doesn't work we won't really care much about it.
We will just continue on with the tutorials and you can try it later out with the same comment.
So here we go it is soon going to finish it.
But in this case we just weren't able to find anything.
So let me just try here.
Another Web site where basically a lot of J.
We just typed Microsoft without dot com.
Maybe maybe it will.
Search it has a company name and it might find some of the results.
We'll give it one more try after it if it doesn't find anything here.
And we will finish that story there since there is no point as I said sometimes this to find something
and sometimes it just doesn't want to find anything.
So we will wait for this to finish first.
Two hundred results are already over.
No.
This one didn't work as well.
Certainly the stretch.
Try out one Web site that work 20 minutes ago when I tried it.
This is a Web site from my country.
Basically some university Web site it doesn't even matter.
You can try this on any Web site you want maybe if we use the other Web site maybe it will print us
something if it doesn't work we'll just proceed to the next sartorial which will be shot and to basically
a search engine basically a web site that we use to search for these portable devices.
Now you will be surprised to how many vulnerable devices are there out on the Internet.
The most common vulnerable devices are basically the rafters with the default username and password.
And if you were to go on to the logon page that I.P. address you will be able to enter the router and
change all their settings.
But more about that in the next story or as we can see.
This one didn't work either.
So three times we tried and it didn't work any of those three.
So basically later on today tomorrow whenever you want you can just try the command out once again and
it will probably work.
It just doesn't matter work right now.
So once again it is located in this directory.
You won't be able to run it from the terminal or from the directory if you want to show in next tutorials
how to more file and be able to run it from any directory with just its name.
So for example
I'll show you how to run this file just its name and not going to this directory all the time when want
to use it but we will teach that in some of the other tutorials and for now on I will cut the tour short
here and I hope I see you in the next one.