May 2017
Intermediate to advanced
416 pages
21h 33m
English
Run the following Nmap command to check whether any e-mail address contained in users.txt exists:
$nmap -sn --script google-people-enum --script-args='username=<username>,password=<password>,userdb=users.txt' <domain>
For any valid e-mail address found in the domain, it will return the contact information that includes the full name and photo:
Host script results: | google-people-enum: | users: | | user1@example.com: | photo: https://lh3.googleusercontent.com/XXXXXXXXXXXXX/photo.jpg | name: User 1 | | user2@example.com: |_ photo: https://lh3.googleusercontent.com/XXXXXXXXXXXXXXX/photo.jpg
Read now
Unlock full access