Infrastructure & Network Reconnaissance
theHarvester
Collects emails, subdomains, and names from public sources.
theHarvester is an open-source reconnaissance tool that gathers emails, subdomains, and hostnames from public sources such as search engines and online PGP key servers. It is commonly used by security professionals to perform initial information gathering during ethical hacking engagements or vulnerability assessments. This helps identify potential attack surfaces and exposed organizational assets before deeper analysis begins.
Dual-use tool. This tool can be used for research and investigation, and also to find, track or identify people without their consent. Listing it here is not an endorsement of either use.
Privacy note. theHarvester gathers emails, subdomains and names for a domain or organization from search engines, certificate transparency logs, DNS datasets, code repositories and other public sources, so an email address or name connected to a domain you are linked to can be collected. Its README says to run it only against targets you own or have explicit permission to test.
Official site: https://github.com/laramies/theHarvester
Source: https://github.com/laramies/theHarvester
Last verified 2026-08-30.
Description drafted with an AI model. How entries are checked.