For those of you who don’t know, there is an auxiliary email module that lets you collect an email address from a domain name using Metasploit. It’s called the ‘Engine Domain Email Address Collector” which is just easy to use. And so lemme guide you on how to use this auxiliary module. First you need to start the Metasploit Console by typing:
msfconsole
Then type :
use auxiliary/gather/search_email_collector
search collector
Now you need to set the domain that you want to harvest eg gmail.com, yahoo.com, rootcon.org but for this tutorial, we will use gmail.com.
set domain gmail.com
If you want to store the harvested emails just type set outfile then the path and the filename of the file, for example:
set outfile /home/shipcode/list.txt
To begin harvesting, just type run:
run
-- Cross Posted from The ProjectX Blog
About the Contributor:
Shipcode is a prolific blogger of ROOTCON and at the same time an InfoSec enthusiast from Cebu. He was inspired to join ROOTCON as part of the core team to share his knowledge in information security. He encourages other like minded individuals to come forward and share their knowledge through blogging right here at ROOTCON Blog section.
ROOTCON is managed by like minded InfoSec professionals across the Philippines. All rights reserved. Designated trademarks, brands and articles are the property of their respective owners.
