TheHarvester
softwareAbout
Open-source OSINT reconnaissance tool that gathers emails, subdomains, IPs, and URLs from public sources during penetration tests and security assessments.
Pros
- +Extensive integration with 40+ intelligence sources
- +No cost for basic functionality; many modules work without API keys
Cons
- -Many advanced features require paid API keys
- -Requires Python 3.12+ and manual dependency management
This may be an affiliate link — the creator and GuruStacks may earn a commission, at no extra cost to you. Learn more
Details
Pricing
Model
open source
Platforms
Related
Similar tools
View alternatives →Recon-ng
4.4Full-featured open-source web reconnaissance framework for OSINT gathering, with a modular Metasploit-like interface written in Python.
OpenVAS
4.2Open-source vulnerability scanner providing comprehensive network security auditing and vulnerability assessment for detecting security issues across IT infrastructure.
Nmap
4.2Free and open-source network discovery and security auditing utility that determines available hosts, services, OS types, and firewall characteristics via raw IP packets.
Metasploit Framework
4.6The world's most widely used penetration testing framework for verifying vulnerabilities and conducting security assessments.
SecurityTrails
4.4DNS intelligence and attack surface management platform with historical DNS records, reverse IP lookup, and subdomain enumeration for security research.
VulnHub
4.4Community platform offering free downloadable vulnerable virtual machines for security training, penetration testing practice, and CTF challenges.