Awesome.
I hope you enjoyed the demos,
but before we go I want to leave you with more
information about this amazing tool.
First, I do recommend you learning more about theHarvester.
This tool can easily be expanded for your needs.
For example, you can create new modules that will
automate specific searches for you.
And trust me, it'd save you a lot of time.
And also, you can integrate theHarvester with other tools that you may use.
For example,
I created a little automation script that takes all the emails that
we find and searches them in password databases.
Also,
since theHarvester is a common line tool it can
automate several searches. For example,
it can create batch scripts that do dozens of searches at once.
So, go check out the GitHub page for this tool. In there you'll find
tons of interesting information and even a wiki,
which will teach you how to use the tool and how to customize it.
Also,
you may be wondering what you can do to protect your company
from this kind of information gathering attack.
Well, the first suggestion is to use theHarvester against your own
company so then you can see what is available to the world.
You may find really interesting things.
For example,
I found that my email address was on the About page of an
old website that I used to have. And that explains why I
used to receive tons of spam email.
And once you find information that is available to the internet you
can try to reduce your footprint on the internet.
For example,
you can ensure that your DNS records are not
revealing any sensitive information.
Or you can try to delete your email address from all the pages you can find.
Or you can even make sure that you decommission old websites
so then they are not available for hackers.
So that's it. That's the end of this course.
I hope you liked our demos and that now you have a new tool in
your belt for your next red team engagement.
So, I'll see you later.