Team Hexmos

Find Emails of People Online through OSINT Techniques

Sreedeep cv's photo
Sreedeep cv
·

2 min read

Finding emails and additional information about people can be tryicky. Why not use some Opensource intelligence methods to find people, details, email etc. Disclaimer! Do not misuse the information for unethical purposes.

Let’s go. First let me introduce the the CLI tool called theHarvester. This tool can get the email of people working in a company.

theHarvester -d microsoft.com -l 200 -b baidu

  • -d: Specifies the domain name you want to search, e.g., microsoft.com.

  • -l: Limits the number of results to fetch, e.g., 200.

  • -b: Sets the source or search engine you want to use. Options include baidu, bing, google, linkedin, yahoo, and more.

Shodan: The Search Engine for the Internet of Things

While theHarvester focuses on emails and subdomains, Shodan is your go-to tool for finding devices connected to the internet, such as servers, routers, and webcams. Surprisingly, it can also uncover email servers and help you dig deeper into their configurations.

shodan search "Microsoft Exchange"

  • Search for specific technologies like "Microsoft Exchange" to find email servers.

  • Use filters like country:US or port:25 to narrow down your results.

Shodan also offers a web interface, which is ideal for those who prefer not to use the command line.

Maltego: A Visual OSINT Tool

If you prefer a graphical interface, Maltego is an excellent choice. It provides a visual way to map connections between entities like people, companies, emails, domains, and more.

  • Transform Capabilities: Automatically fetch data from multiple sources, such as DNS records, social media platforms, and search engines.

  • Graphical Visualizations: Easily see relationships between different pieces of information.

  • Custom Scripts: Write your own transforms for highly specific use cases.

Maltego is especially useful for investigations requiring a bird's-eye view of all interconnected data.

Finding emails and other details online doesn’t have to be overwhelming. Tools mentioned above make it easy to reduce your efforts and gather valuable, publicly available information efficiently. Thanks for the read.

I am currently working on LiveAPI ; Super convenient API documentation in scale. Please give it a try and provide feedback.

toolstechnologyhacking