12

Seculabs eBook - The Harvester - A Vulnerability Assessment Tool

Embed Size (px)

Citation preview

Page 1: Seculabs eBook - The Harvester - A Vulnerability Assessment Tool
Page 2: Seculabs eBook - The Harvester - A Vulnerability Assessment Tool

SECUGENIUS SECURITY SOLUTIONS

--------------------------------------------------------------------------------------

(A UNIT OF HARKSH TECHNOLOGIES PVT. LTD)

Company Profile:

Secugenius Security Solutions is a Student Entrepreneurial Company started by 2 Social Student

Entrepreneurs in 2010 with an aim to make our country Cyber Crime Free. We at SECUGENIUS

are headquartered at Ludhiana, the Manchester of Punjab. The main activities of Secugenius

Security Solutions are providing training in Information Security and various professional courses.

Secugenius Security Solutions is an organization which believes in inventing and implementing new

ideas to influence the technological minds of the youngsters

Looking at the number of Cyber Crimes since last many years, We at Secugenius Security

Solutions provides training on Ethical hacking & Cyber Security to students, IT Professionals, Bank

Employees, Police officials.

Secugenius conducts workshops in all parts of the country in various Colleges/institutions for the

benefit of the students & making them aware of the latest trends in technological era of the

Computer age. We believe in spreading knowledge to all the youngsters & growing minds of the

nation so that they could serve the nation with perfect skill-sets in the field of Cyber Crime

Investigation & Forensic Sciences

Secugenius provides various security solutions to its clients by securing their websites from cyber

attacks. We provide training to college students, graduates and professionals in various fields.

Education is delivered to students through two modes i.e. Regular mode and Distance mode which

are available as short term and long term courses.

In the workshops conducted by Secugenius, participants can claim to be trained by the highly

experienced & skilled corporate trainers from different parts of the nation. We believe in making

the base of students to be as strong as possible. All the modules have been designed in order to

provide students with specialized knowledge by specialized trainers.

This library was furnished, managed and funded by the Founders and Directors of Secugenius

Er. Harpreet Khattar & Er. Kshitij Adhlakha. The overall resource person for the content of

the series of this Digital Library is Er. Chetan Soni - Sr. Security Specialist, Secugenius Security

Solutions.

This Online Digital Library has been initiated as a free resource & permanent

resource on specialization basis for every student of Team Secugenius.

Page 3: Seculabs eBook - The Harvester - A Vulnerability Assessment Tool

The Harvester – A Vulnerability Assessment Tool

Product ID No: SG/ODL/13046

Founder & Director: Harpreet Khattar & Kshitij Adhlakha

Resource Person: Chetan Soni & Ranjan Raja

Secugenius Security Solutions

SCO-13A, Model Town Extn, Near Krishna Mandir,

Ludhiana-141002, Punjab – India

[email protected], [email protected]

www.secugenius.com , www.seculabs.in

Page 4: Seculabs eBook - The Harvester - A Vulnerability Assessment Tool

THE HARVESTER – the Harvester is an open source intelligence

tool for obtaining email addresses, user names and hostnames/sub domains from public sources such as Search Engine like Google, Bing or LinkedIn etc.

Harvester is already installed in Backtrack 5.

Requirements:-

1. Backtrack Linux Operating System (Live or ISO) 2. VMware Workstation (If you use an ISO File) 3. Wireless USB Adaptor (If you use VMware Workstation)

Steps:- Go to Backtrack – Vulnerability Assessment – Web Application Assessment –

Web Open Source Assessment – theHarvester

To open theHarvester, firstly we have to go to the harvester directory in Backtrack.

1. First open a New Terminal.

2. Type cd / - This command will take to the root directory.

Page 5: Seculabs eBook - The Harvester - A Vulnerability Assessment Tool

3. ls – This command will display the entire files.

4. cd pentest - This command will take to the pentest directory.

5. ls – Again ls command to view the inside directory.

6. cd enumeration - This command will let you inside the enumeration directory.

7. Now type this command - ls

8. cd theharvester - This command will let you inside the harvester directory.

9. ls - this command will show theHarvester.py file

Page 6: Seculabs eBook - The Harvester - A Vulnerability Assessment Tool

10. Now type “./theHarvester.py” to open the application.

Page 7: Seculabs eBook - The Harvester - A Vulnerability Assessment Tool

Example 1:- Command syntax:

./theHarvester.py -d <url> -l 300 –b <search engine name> Example:

./theHarvester.py -d secugenius.com -l 300 –b google

Overall result will be seen like this.

Page 8: Seculabs eBook - The Harvester - A Vulnerability Assessment Tool

Example 2:- To Use –v parameter to see the virtual hosts.

Command syntax: ./theHarvester.py -v -d <url> -l 300 –b <search engine name>

Example: ./theHarvester.py –v -d secugenius.com -l 300 –b google

Page 9: Seculabs eBook - The Harvester - A Vulnerability Assessment Tool

Overall result showing the Virtual hosts.

Page 10: Seculabs eBook - The Harvester - A Vulnerability Assessment Tool

Example 3:-

Save Overall Result in Html file. Command syntax:

./theHarvester.py -v -d <url> -l 300 –b <search engine name> -f <filename> Example:

./theHarvester.py –v -d secugenius.com -l 300 –b google -f secufile

Now press ls to see the result of your html file. (In my case my file is secufile)

11. Now you can open your html file to see the overall results in the browser.

Page 11: Seculabs eBook - The Harvester - A Vulnerability Assessment Tool

List of scanned E-mails.

List of Scanned Hosts.

Page 12: Seculabs eBook - The Harvester - A Vulnerability Assessment Tool

List of Found Virtual Hosts.