email_harvest
Harvest public emails, subdomains, and hosts for an in-scope domain from search engines and certificate transparency logs.
Instructions
Harvest emails, subdomains and hosts for a domain (theHarvester, passive).
TOOL_NAME=email_harvest DISPLAY_NAME=Email/Host Harvester (theHarvester) USECASE=Collect public emails, subdomains and hosts for an in-scope domain from search engines and CT logs INSTRUCTIONS=1. Ensure the domain is in the engagement scope, 2. Optionally pick sources/limit, 3. Call INPUT_DESCRIPTION=domain (apex domain); sources (comma-separated theHarvester -b sources); limit (max results) OUTPUT_DESCRIPTION=Dict with status, parsed 'emails' list, raw output, command and mode EXAMPLES=email_harvest("example.com") PREREQUISITES=Domain authorized and in scope RELATED_TOOLS=subdomain_enum, dns_recon, username_osint
Args: domain: Apex domain to harvest (must be in scope). sources: Comma-separated theHarvester data sources (free/no-key sources by default). limit: Maximum number of results to request.
Returns:
Structured result dict including a parsed emails list.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| limit | No | ||
| domain | Yes | ||
| sources | No | duckduckgo,crtsh,hackertarget,otx,rapiddns |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
No arguments | |||