شناسایی ایمیل های تارگت بصورت آنلاین و با ابزار

[SafeMaster]

سلام بر عزیزان

ابزارهای مفیدی برای شناسایی ایمیل های مربوط به یک دامنه در سرتاسر نت میباشد که هر کدام از الگوریتم منحصر به فرد خود برای جستجو در وب و یا دیکشنری استفاده میکنند اما متاسفانه عمدتا این ابزارها غیر رایگان شدند و ما قصد داریم در این تاپیک ابزارها و سایتهای که در این زمینه میتونه به ما کمک کنه رو منتشر کنیم .

وبسایت های زیر بصورت رایگان و غیر رایگان ابزار جستجو ایمیل بر اساس نام دامنه را به ما میدهند :

[URL="https://hunter.io/"]https://hunter.io[/URL]
[URL]https://snov.io/email-finder[/URL]
[URL]https://minelead.io/[/URL]
[URL]https://anymailfinder.com/[/URL]
[URL]https://maildb.io/[/URL]
[URL]https://skrapp.io/domain-search[/URL]

همچنین ابزار محبوب theHarvester در کالی به ما در یافتن ایمیل آدرس های مربوط به یک دامنه کمک بسیاری میکنه شما میتونید این ابزارو در کالی لینوکس و یا لینک زیر دریافت و استفاده کنید :

https://github.com/laramies/theHarvester/

What is this?
theHarvester is a very simple to use, yet powerful and effective tool designed to be used in the early stages of a
penetration test or red team engagement. Use it for open source intelligence (OSINT) gathering to help determine a
company's external threat landscape on the internet. The tool gathers emails, names, subdomains, IPs and URLs using
multiple public data sources that include:

Passive:
baidu: Baidu search engine - www.baidu.com

bing: Microsoft search engine - www.bing.com

bingapi: Microsoft search engine, through the API (Requires an API key, see below.)

bufferoverun: Uses data from Rapid7's Project Sonar - www.rapid7.com/research/project-sonar/

certspotter: Cert Spotter monitors Certificate Transparency logs - https://sslmate.com/certspotter/

crtsh: Comodo Certificate search - https://crt.sh

dnsdumpster: DNSdumpster search engine - https://dnsdumpster.com

dogpile: Dogpile search engine - www.dogpile.com

duckduckgo: DuckDuckGo search engine - www.duckduckgo.com

exalead: a Meta search engine - www.exalead.com/search

github-code: GitHub code search engine (Requires a GitHub Personal Access Token, see below.) - www.github.com

google: Google search engine (Optional Google dorking.) - www.google.com

hackertarget: Online vulnerability scanners and network intelligence to help organizations - https://hackertarget.com

hunter: Hunter search engine (Requires an API key, see below.) - www.hunter.io

intelx: Intelx search engine (Requires an API key, see below.) - www.intelx.io

linkedin: Google search engine, specific search for LinkedIn users - www.linkedin.com

linkedin_links:

netcraft: Internet Security and Data Mining - www.netcraft.com

otx: AlienVault Open Threat Exchange - https://otx.alienvault.com

pentesttools: Powerful Penetration Testing Tools, Easy to Use (Needs an API key and is not free for API access) - https://pentest-tools.com/home

rapiddns: DNS query tool which make querying subdomains or sites of a same IP easy! https://rapiddns.io

securityTrails: Security Trails search engine, the world's largest repository of historical DNS data
(Requires an API key, see below.) - www.securitytrails.com

shodan: Shodan search engine, will search for ports and banners from discovered hosts - www.shodanhq.com

spyse: Web research tools for professionals (Requires an API key.) - https://spyse.com

sublist3r: Fast subdomains enumeration tool for penetration testers - https://api.sublist3r.com/search.php?domain=example.com

Suip: Web research tools that can take over 10 minutes to run, but worth the wait - https://suip.biz

threatcrowd: Open source threat intelligence - www.threatcrowd.org

threatminer: Data mining for threat intelligence - https://www.threatminer.org/

trello: Search trello boards (Uses Google search.)

twitter: Twitter accounts related to a specific domain (Uses Google search.)

urlscan: A sandbox for the web that is a URL and website scanner - https://urlscan.io

vhost: Bing virtual hosts search

virustotal: virustotal.com domain search

yahoo: Yahoo search engine

all: