Metasploit渗透测试论坛

 找回密码
 立即注册

QQ登录

只需一步,快速开始

扫一扫,访问微社区

安络长矛深度安全检测系统
Metascan metasploit pro
查看: 261|回复: 0

使用metasploit收集邮箱

[复制链接]

1

主题

0

好友

49

积分

正式会员

Rank: 2

发表于 2017-4-20 23:11:37 |显示全部楼层
发现这个还是蛮有用处的,如果感到蛋疼你就拍拍手,至于收集到邮箱之后做什么用途,各位就可以自己随意发挥了
[root@sms framework3]# ./msfconsole
888                           888        d8b888
888                           888        Y8P888
888                           888           888
88888b.d88b.  .d88b. 888888 8888b. .d8888b 88888b. 888 .d88b. 888888888
888 “888 “88bd8P  Y8b888       “88b88K     888 “88b888d88″”88b888888
888  888  88888888888888   .d888888″Y8888b.888  888888888  888888888
888  888  888Y8b.    Y88b. 888  888     X88888 d88P888Y88..88P888Y88b.
888  888  888 “Y8888  “Y888″Y888888 88888P’88888P” 888 “Y88P” 888 “Y888
888
888
888
=[ metasploit v3.3.4-dev [core:3.3 api:1.0]
+ — –=[ 534 exploits – 252 auxiliary
+ — –=[ 259 payloads – 23 encoders – 8 nops
=[ svn r8821 updated today (2010.03.15)
msf > use auxiliary/gather/search_email_collector
ok,我们看一下描述。
msf auxiliary(search_email_collector) > info

Name: Search Engine Domain Email Address Collector
Version: 7613
License: Metasploit Framework License (BSD)
Rank: Normal
Provided by:
Carlos Perez <carlos_perez@darkoperator.com>
Basic options:
Name           Current Setting  Required  Description
—-           —————  ——–  ———–
DOMAIN                          yes       The domain name to locate email addresses for
OUTFILE                         no        A filename to store the generated email list
SEARCH_BING    true             yes       Enable Bing as a backend search engine
SEARCH_GOOGLE  true             yes       Enable Google as a backend search engine
SEARCH_YAHOO   true             yes       Enable Yahoo! as a backend search engine
Description:
This module uses Google, Bing and Yahoo to create a list of valid
email addresses for the target domain.
恩,其实就是用Google,yahoo和bing搜索网站的邮件地址,不管怎么样,还是可以测试一下的了,我们找个蛋疼的网站,邮件不能太多了,就随便找一个吧,试试古城热线www.xaonline.com
ine.comliary(search_email_collector) > set DOMAIN xaon
DOMAIN => xaonline.com
trueuxiliary(search_email_collector) > set SEARCH_BING
SEARCH_BING => true
LE trueiliary(search_email_collector) > set SEARCH_GOOGL
SEARCH_GOOGLE => true
O truexiliary(search_email_collector) > set SEARCH_YAHOO
SEARCH_YAHOO => true
msf auxiliary(search_email_collector) > run
Harvesting emails …..
Searching Google for email addresses from xaonline.com
Extracting emails from Google search results…
Searching Bing email addresses from xaonline.com
Extracting emails from Bing search results…
Searching Yahoo for email addresses from xaonline.com
Extracting emails from Yahoo search results…
Located 3 email addresses for xaonline.com
mingren@xaonline.com
webmaster@xaonline.com
xaonline@xaonline.com
Auxiliary module execution completed
msf auxiliary(search_email_collector) >
ok,蛋疼,收集到的很少,不过你可以换个网站试试,经过测试,貌似只有yahoo搜索能正常的搜索出来邮件地址。

如文中未特别声明转载请注明出自:http://www.metasploit.cn/
*滑动验证:
您需要登录后才可以回帖 登录 | 立即注册

QQ|Archiver|手机版|Metasploit ( 粤ICP备15008156号-1 )

GMT+8, 2017-6-23 23:31 , Processed in 0.350724 second(s), 28 queries .

Powered by Discuz! X2.5

© 2001-2012 Comsenz Inc.

回顶部