Software




Gadgets



Code

Kali 101: Harvesting Emails

by - June 11, 2019

I think I’m gonna become a hacker, a bad one... That’s if I don’t become a billionaire, so I started learning Kali and am going to share some cool stuff I’ve seen so far. We are going to harvest e-mails from search engines. (this is “hello world in Kali Linux”).

I am going to make the assumption that you know how to install Kali in a virtual environment or you already have it for that matter (If enough of you don’t know how I could show you how just tell me in the comments section).

step one. Open terminal.

step two. key in the command: msfconsole
This launches the MetaSploit framework Console which is the tool we are going to be using.



step three. key in the command: use gather/search_email_collector
This launches the email search tool in MSf.



step four. key in the command: show options
This will display the list of possible options you have within the search tool. Domain shows where the emails are stored eg @gmail.com or @castynet.co.ke. Outfile shows where the harvested emails will be stored if you want to have them stored. It's mostly a .txt file like emails.txt. Finally, there are the sites to search where unfortunately the options are limited to 3, Google, Bing, and Yahoo. For these, you can only mark search or not if there is any you’d like to exclude.



step five. key in the command: Set DOMAIN gmail.com
This sets the domain to Gmail but you may select any other of your choice.

step six. key in the command: set OUTFILE to email.txt
this sets the file name to email. You can put any other name if you like.
At this point, if you key in: show options you’ll realize that the outfile and domain both change.



step seven. key in the command: exploit
This is the final step and it authorities the search tools to search the web for emails that have just been left around.


To find the stored emails go to places>>home>>email.txt. Just to mention my search read zero because we only have about emails registered under our domain & its therefore easy to keep them safe.

As you’ll notice the tool is not very effective because it will only get you a couple hundred emails
from Gmail and the service has hundreds of millions of users. It's still cool though.

If you’re concerned about your own email, just don’t leave it at any site. Ensure that you’re privacy is guaranteed.

Disclaimer
Any actions and or activities related to the material contained within this Website is solely your responsibility. The misuse of the information on this website can result in criminal charges brought against the persons in question. NukeSafaris and its authors will not be held responsible in the event any criminal charges be brought against any individuals misusing the information in this website to break the law.

You May Also Like

0 comments