‫Developed by Ed Security, the Harvester is a command line program written in Python, which is to gather
‫emails, subdomains, hosts, employee names, open ports and banners from different public sources
‫like search engines, PGP keys and showdown computer databases.
‫You can download the harvester from its GitHub page https colon slash slash GitHub dot com slash Laramie's.
‫That's LHR, AMISOM, the Harvester.
‫It's also embedded in Linux.
‫When you run the script with no parameters, you can see the usage options.
‫One of the usages of the harvester tool is the harvester dashty domain name dash el result limit Dasch
‫be datasource.
‫When the script finishes its job, you can see the results, emails and.
‫Hosts found.
‫Rickon is a full featured Web reconnaissance framework written in Python, complete with independent
‫modules, database interaction built in convenience functions, interactive help and command completion.
‫Record energy provides a powerful environment, Rickon Energy has a look and feel similar to the metabolite
‫framework, reducing the learning curve for leveraging the framework.
‫Rickon Energy is designed exclusively for Web based open source reconnaissance.
‫If you want to exploit, you can use the Métis framework or any other exploitation tool.
‫You can download the Rickon framework on the website seen on this slide, and it's already embedded
‫and ready to use and callisthenics.
‫When you run recon engy script, you'll end up with a shell like interface.
‫Now you can use recon energy commands, type help to see the available commands.
‫Type show module's to see the available module's.
‫As you can see, there are a lot of module's.
‫You can use search commands to find the modules we need, for example, we can type search access to
‫find the module which is aimed to find out excess as vulnerabilities type use keyword with the module
‫name to use the module.
‫In this example, let's use recon slash domain's hyphen vulnerabilities exceed module to learn more
‫about the module type show in.
‫This module checks excess dot com website for excess records associated with the domain.
‫Type show options to see the parameters of the model set the source parameter value, TAIPING Set Source
‫W-W NHS, UK Command.
‫Type run to run the module, in this example, we found an excess vulnerability for NHS DOT UK website
‫was published in 2008, even though we're almost sure it was fixed years ago, it's better to look and
‫see if the vulnerability still exists.