Developed by Ed Security, the Harvester is a command line program written in Python, which is to gather
emails, subdomains, hosts, employee names, open ports and banners from different public sources
like search engines, PGP keys and showdown computer databases.
You can download the harvester from its GitHub page https colden slash GitHub Dotcom slash Laramie's.
That's LHR, AMISOM, the Harvester.
It's also embedded in Linux.
When you run the script with no parameters, you can see the usage options.
One of the usages of the harvester tool is the harvester dashty domain name Dasch result limit Dasch
be datasource.
When the script finishes its job, you can see the results, emails and hosts found.
Reconning is a full featured Web reconnaissance framework written in Python, complete with independent
modules, database interaction built in convenience functions, interactive help and command completion.
Rickon Energy provides a powerful environment, Rickon has a look and feel similar to the metabolite
framework, reducing the learning curve for leveraging the framework, Rickon Energy is designed exclusively
for Web based open source reconnaissance.
If you want to exploit, you can use the Métis framework or any other exploitation tool.
You can download the Rickon framework on the website seen on this slide, and it's already embedded
and ready to use in callisthenics.
When you run recon engy script, you'll end up with a shell like interface.
Now you can use Rickon energy commands type help to see the available commands.
Type show module's to see the available module's.
As you can see, there are a lot of module's.
You can use search commands to find the modules we need, for example, we can type search access to
find the module which is aimed to find out excess as vulnerabilities type use keyword with the module
name to use the module.
In this example, let's use recon slash domain's hyphen vulnerabilities exceed module to learn more
about the module type showing for.
This module checks excess dot com website for excess records associated with the domain.
Type show options to see the parameters of the model set the source parameter value, Taiping set source
w WW NHS dot UK Command.
Type run to run the module, in this example, we found an excess vulnerability for NHS DOT UK website
was published in 2008, even though we were almost sure it was fixed years ago.
It's better to look and see if the vulnerability still exists.