Hello everyone. So in
this video we are going to see how we
can perform email enumeration using nmap.
So we are going to identify emails from
Target websites using this particular
scan type.
So the syntax of doing this particular scan is
in map the target IP address followed by
-script equals to http -
grip. So basically we are
going to spider the website and we are going to
grip for specific results and those results
will be emails.
So you can scan the Target by simply giving IP address and specify
this particular flag. That is HTTP -
drap you can always add hyphen V
to see the output inverse mode and this is
the example for how you can perform this type
of scan.
So it is the Practical time and let's see
this type of scan in action.
As you can see on the screen. I have type the command there
is nmap.
Port 80 and 443 followed by hyphen hyphen
script, the script is HTTP -
grip but in the script also, I'm using the
script arguments which is http-grip dot
built-ins equals to
email.
That means I am going to search for emails
only from the Target website. That
is rpims.com.
so when I run this particular scan
You have to notice that in the output I will
be getting specific set of emails as you
can see. The first email is info at the rate
rpims.com. And then I have found
out total 11 email addresses as
you can see director at the rate RPMs vs.
Patil Raj upper na
Pawan, etc. Etc. So these
are the professors of this particular University.
And I have gathered all those
email addresses by using this specific scan
type. You can always use this
can type to identify a number
of targets.
And to know their email addresses, this is
very helpful in the Recon process.
So I hope you guys understood how to do this. Thank you.