February 2018
Intermediate to advanced
426 pages
11h 3m
English
Collecting email addresses is a common part of a penetration test, allows us to understand the customer footprint on the internet, harvester credentials for future brute-force attacks, and phishing campaigns.
To create a list of valid email addresses for the target domain, we can use the Search Engine Domain Email Address Collector auxiliary module:
msf > auxiliary/gather/search_email_collectormsf auxiliary(search_email_collector) > set DOMAIN packtpub.commsf auxiliary(search_email_collector) > set DOMAIN packtpub.comDOMAIN => packtpub.commsf auxiliary(search_email_collector) > run[*] Harvesting emails .....[*] Searching Google for email addresses from packtpub.com[*] Extracting emails from Google ...
Read now
Unlock full access