‫Developed by Edge Security, the Harvester is a command line program written in Python, which is to
‫gather emails, subdomains, hosts employee names, open ports and banners from different public sources
‫like search engines, p-gp keys and showdown computer databases.
‫You can download the harvester from its GitHub page https colon slash slash GitHub JD.com slash Laremy
‫is that's L.A. AMPAS slash the harvester.
‫It's also embedded in Kali Linux.
‫When you run the script with no parameters, you can see the usage options.
‫One of the usages of the harvester, too, is the harvester dashti domainname, dash l result limit
‫Dash B datasource when the script finishes its job.
‫You can see the results, emails and hosts found.
‫Recon Energy is a full featured Web reconnaissance framework written in Python, complete with independent
‫modules, database interaction, built in convenience functions, interactive help and command completion.
‫Record energy provides a powerful environment, Recon Energy has a look and feel similar to the Metasploit
‫Framework, reducing the learning curve for leveraging the framework.
‫Recon Energy is designed exclusively for web based open source reconnaissance.
‫If you want to exploit, you can use the Metasploit Framework or any other exploitation tool.
‫You can download the Recon framework on the website seen on this slide, and it's already embedded and
‫ready to use and Kali Linux.
‫When you run Recon Energy script, you'll end up with a shell like interface.
‫Now you can use Recon Energy commands type help to see the available commands.
‫Typekit show modules to see the available modules.
‫As you can see, there are a lot of modules.
‫You can use search commands to find the modules we need.
‫For example, we can tape search access to find the module, which is aimed to find out access as vulnerabilities,
‫type use keyword with the module name to use the module.
‫In this example, let's use Recon Slash Domains Hyphen Vulnerabilities Slash Exceed module to learn
‫more about the module type show in.
‫This module checks excesses edengay.com website for excess records associated with the domain.
‫Type show options to see the parameters of the module set, the source parameter value typing, set
‫source UWW, NHS Dot UK command.
‫Tape run to run the module in this example, we found an excess as a vulnerability for NHS staff at
‫UK website was published in 2008.
‫Even though we were almost sure it was fixed years ago, it's better to look and see if the vulnerability
‫still exists.