Pull to refresh

theHarvester and Datasploit Comparison of Python OSINT Tools

There are tools designed to perform OSINT activities by scrounging information from the internet both Some of this tool include;

  • theHarvester
  • Datasploit

They perform OSINT activities, some use google dorks and other use available public sources and others use both techniques. Both the above tools that we are going to discuss are entirely written in python.

theHarvester


theHarvester is a very simple, yet effective tool designed to be used in the early stages of a penetration test. Use it for open source intelligence gathering and helping to determine a company's external threat landscape on the internet. The tool gathers emails, names, subdomains, IPs

  • Google, Bing, Baidu, Yahoo

There are more public sources in fact there are about 22+ public sources that are used by this OSINT tool theHarvester. This is where the power of this tool comes from, the ability to use different public sources to scrounge confidential information

Settings up theHarvester


It is every easy to setup this great OSINT tool, It is also good to note that, this tool requires python3.7+

$ sudo apt-get install python3-pip 
$ sudo pip3 install virtualenv 
$ virtualenv -p python3 theharvester
$ git clone https://github.com/laramies/theHarvester
$ pip3 install -r requirements
$ pip3 install theHarvester
$ ./theHarvester.py  -d google.com -b google

That's all about theHarvester as you can see it's very easy to use this setup and use this OSINT tool, you will also notice in the above demostration the following;

$ -d google.com
$ -b google


$ ./theHarvester.py  -d google.com -b bing
#

Features of theHarvester


theHarvester can get the following

  • Email,Subdmain, Open Ports

theHarvester has been intergrated online

Datasploit


Datasploit is also an OSINT tool written in python, it's not just a tool it is also an entire OSINT framework that can be used from the command line or from other python scripts.

There is only one problem with this tool or framework, it supports python2.7 which has come to and end, and so settings up this tool won't be very easy. So in this part I will just show you have to set up and install.

Settings up and installing datasploit


# Using pip to install datasploit
$ pip install datasploit
# Or
$ git clone https://github.com/datasploit/datasploit 
$ pip install -r requirements.txt
$ python datasploit.py google.com

They both perform OSINT work, so you can choose which works better for your OSINT activities. As for datasploit it does not have much public sources and stable ones as does theharvester

Features of datasploit


Datasploit has some notable features which include;

  • Find emails
  • Phone number information gathering
  • Bitcoin address information gathering

The last two Phone number and Bitcoin address information gathering are unique to datasploit alone in the above tools.

In conclusion you can choose what ever you find helpful for your OSINT needs.
Tags:
Hubs:
You can’t comment this publication because its author is not yet a full member of the community. You will be able to contact the author only after he or she has been invited by someone in the community. Until then, author’s username will be hidden by an alias.