공격툴&정보수집 - 17. 스펨 메일 타켓 정보 수집

공격툴&정보수집 - 17. 스펨 메일 타켓 정보 수집

 

 

본 내용은 교육 과정에서 필요한 실습 목적으로 구성된 것이며, 혹시라도 개인적인 용도 및 악의적인 목적으로 사용할 경우, 법적 책임은 본인에게 있다는 것을 알려드립니다.

 

 

 - theharvester : 도메인을 이용하여 사용자 이-메일 정보를 수집할 수 있는 툴

 

Ex1) theharvester 툴

 

@ Kali Linux

 

root@kali:~# theharvester

 

*******************************************************************
*                                                                 *
* | |_| |__   ___    /\  /\__ _ _ ____   _____  ___| |_ ___ _ __  *
* | __| '_ \ / _ \  / /_/ / _` | '__\ \ / / _ \/ __| __/ _ \ '__| *
* | |_| | | |  __/ / __  / (_| | |   \ V /  __/\__ \ ||  __/ |    *
*  \__|_| |_|\___| \/ /_/ \__,_|_|    \_/ \___||___/\__\___|_|    *
*                                                                 *
* TheHarvester Ver. 2.6                                           *
* Coded by Christian Martorella                                   *
* Edge-Security Research                                          *
* cmartorella@edge-security.com                                   *
*******************************************************************

Usage: theharvester options

       -d: Domain to search or company name
       -b: data source: google, googleCSE, bing, bingapi, pgp
                        linkedin, google-profiles, people123, jigsaw,
                        twitter, googleplus, all

       -s: Start in result number X (default: 0)
       -v: Verify host name via dns resolution and search for virtual hosts
       -f: Save the results into an HTML and XML file
       -n: Perform a DNS reverse query on all ranges discovered
       -c: Perform a DNS brute force for the domain name
       -t: Perform a DNS TLD expansion discovery
       -e: Use this DNS server
       -l: Limit the number of results to work with(bing goes from 50 to 50 results,
       -h: use SHODAN database to query discovered hosts
            google 100 to 100, and pgp doesn't use this option)

Examples:
        theharvester -d microsoft.com -l 500 -b google
        theharvester -d microsoft.com -b pgp
        theharvester -d microsoft -l 200 -b linkedin
        theharvester -d apple.com -b googleCSE -l 500 -s 300

 

 

 

 

Ex2) theharvester 툴을 이용한 사용자 이-메일 정보 수집

 

 -d : 이-메일 도메인

 -l : 검색할 이-메일 개수

 -b : 검색 엔진 지정

root@kali:~# theharvester -d korea.com -l 500 -b google

 

*******************************************************************
*                                                                 *
* | |_| |__   ___    /\  /\__ _ _ ____   _____  ___| |_ ___ _ __  *
* | __| '_ \ / _ \  / /_/ / _` | '__\ \ / / _ \/ __| __/ _ \ '__| *
* | |_| | | |  __/ / __  / (_| | |   \ V /  __/\__ \ ||  __/ |    *
*  \__|_| |_|\___| \/ /_/ \__,_|_|    \_/ \___||___/\__\___|_|    *
*                                                                 *
* TheHarvester Ver. 2.6                                           *
* Coded by Christian Martorella                                   *
* Edge-Security Research                                          *
* cmartorella@edge-security.com                                   *
*******************************************************************

[-] Searching in Google:
 Searching 0 results...
 Searching 100 results...
 Searching 200 results...
 Searching 300 results...
 Searching 400 results...
 Searching 500 results...

 

[+] Emails found:
------------------
aaaa@korea.com
bbbb@korea.com
cccc@korea.com
dddd@korea.com
eeee@korea.com
ffff@korea.com
gggg@korea.com
hhhh@korea.com

 

[+] Hosts found in search engines:
------------------------------------
[-] Resolving hostnames IPs...
183.111.174.9:m.korea.com
183.111.174.9:www.korea.com
183.111.174.9:sun.korea.com
183.111.174.9:w.korea.com

 

 

 

 

Ex3) theharvester 툴을 이용한 사용자 이-메일 정보 수집 내용 파일 저장

 

root@kali:~# theharvester -d korea.com -l 500 -b google > test.txt 2>&1

 

root@kali:~# cat test.txt

 

*******************************************************************
*                                                                 *
* | |_| |__   ___    /\  /\__ _ _ ____   _____  ___| |_ ___ _ __  *
* | __| '_ \ / _ \  / /_/ / _` | '__\ \ / / _ \/ __| __/ _ \ '__| *
* | |_| | | |  __/ / __  / (_| | |   \ V /  __/\__ \ ||  __/ |    *
*  \__|_| |_|\___| \/ /_/ \__,_|_|    \_/ \___||___/\__\___|_|    *
*                                                                 *
* TheHarvester Ver. 2.6                                           *
* Coded by Christian Martorella                                   *
* Edge-Security Research                                          *
* cmartorella@edge-security.com                                   *
*******************************************************************

[-] Searching in Google:
 Searching 0 results...
 Searching 100 results...
 Searching 200 results...
 Searching 300 results...
 Searching 400 results...
 Searching 500 results...

 

[+] Emails found:
------------------
aaaa@korea.com
bbbb@korea.com
cccc@korea.com
dddd@korea.com
eeee@korea.com
ffff@korea.com
gggg@korea.com
hhhh@korea.com

 

[+] Hosts found in search engines:
------------------------------------
[-] Resolving hostnames IPs...
183.111.174.9:m.korea.com
183.111.174.9:www.korea.com
183.111.174.9:sun.korea.com
183.111.174.9:w.korea.com

[유튜브] 동영상 강의 링크 (구독! 좋아요!!!)

공격툴&정보수집 - 제17장 스펨 메일 타겟 정보 수집(theharvester)   https://youtu.be/AwH1oZpu19g