[narc0tics]

Hello, HackCommunity!

I decided to share a simple, but yet functional method with you guys.
All you need is metasploit(the operating system is not of importance.)

This is a way to harvest e-mails from certain domains, that subsequently can be used for spamming, social engineering and whatnot.

1. Make sure your terminal is open.



2. Your version of BackTrack is necessary here. If you are using the newest version(R3), type the following:



3. Now type "msfconsole", and allow it to load metasploit(can take a couple seconds):



4. Enter "use auxiliary/gather/search_email_collector", and this should appear on your screen:



5. Now specify your target, by typing this: "set domain (target)" - like this:



6. Simply type "run", and it should start listing all the e-mails of the domain.



These can be used however you like. In this example, we found "billing@ng-gaming.net", which is actually their paypal e-mail, therefore this is a possible threat to any website Administrator, because there's myriad of ways to hi-jack an e-mail.

Have fun.

[chmod]

Nice tutorial I've always used the harvester for this I assume it works in the same way?

[narc0tics]

Nice tutorial I've always used the harvester for this I assume it works in the same way?

Pretty much.

I thought it'd be good to share an alternative way of doing it.

[chmod]

Yeah it looks good to be honest I will definitely give it a try