provocativo_
back to the arsenal
// arsenal·Recon & OSINTBeginnerFOSS

theHarvester

Email, subdomain, and employee-name OSINT from public sources.

Recon & OSINT

$ theharvester --help

theHarvester

// what it is

Description

Christian Martorella's Python OSINT collector. Pulls from 30+ data sources — search engines, certificate transparency, DNS, and LinkedIn — to build a target profile suitable for spear-phishing reconnaissance or perimeter enumeration.

// use cases

What people use it for

  • Pre-engagement email enumeration
  • Subdomain discovery via passive sources
  • Employee-name harvesting from LinkedIn for pretexting

// commands

The commands you'll type

Multi-source domain harvest

$ theHarvester -d target.tld -b crtsh,bing,duckduckgo,hackertarget

LinkedIn-only employee names

$ theHarvester -d target.tld -b linkedin -l 500

// facts

category
Recon & OSINT
platforms
LIN · MAC
license
FOSS
difficulty
Beginner

// related in Recon & OSINT