theHarvester
Information Gatheringkali · parrotOSINT tool to gather emails, subdomains, hosts, and employee names from public sources.
Install
sudo apt install theharvester
Common commands
theHarvester -d target.com -b all theHarvester -d target.com -b google,bing
Use only on systems you are authorized to test. Follow program scope.
Related tools
Amass
featuredOWASP Amass for in-depth subdomain enumeration and attack surface mapping.
Nmap
featuredIndustry-standard network scanner for port discovery, service detection, and OS fingerprinting. Core recon tool for every engagement.
Subfinder
featuredPassive subdomain discovery tool. Fast and reliable for bug bounty recon.
dnsenum
DNS enumeration script for zone transfers, subdomain brute force, and record discovery.