theHarvester and Datasploit Comparison of Python OSINT Tools
They perform OSINT activities, some use google dorks and other use available public sources and others use both techniques. Both the above tools that we are going to discuss are entirely written in python.
theHarvester is a very simple, yet effective tool designed to be used in the early stages of a penetration test. Use it for open source intelligence gathering and helping to determine a company's external threat landscape on the internet. The tool gathers emails, names, subdomains, IPs
- Google, Bing, Baidu, Yahoo
There are more public sources in fact there are about 22+ public sources that are used by this OSINT tool theHarvester. This is where the power of this tool comes from, the ability to use different public sources to scrounge confidential information
Settings up theHarvester
It is every easy to setup this great OSINT tool, It is also good to note that, this tool requires python3.7+
$ sudo apt-get install python3-pip $ sudo pip3 install virtualenv $ virtualenv -p python3 theharvester $ git clone https://github.com/laramies/theHarvester $ pip3 install -r requirements $ pip3 install theHarvester $ ./theHarvester.py -d google.com -b google
That's all about theHarvester as you can see it's very easy to use this setup and use this OSINT tool, you will also notice in the above demostration the following;
$ -d google.com $ -b google
$ ./theHarvester.py -d google.com -b bing #
Features of theHarvester
theHarvester can get the following
- Email,Subdmain, Open Ports
theHarvester has been intergrated online
Datasploit is also an OSINT tool written in python, it's not just a tool it is also an entire OSINT framework that can be used from the command line or from other python scripts.
There is only one problem with this tool or framework, it supports python2.7 which has come to and end, and so settings up this tool won't be very easy. So in this part I will just show you have to set up and install.
Settings up and installing datasploit
# Using pip to install datasploit $ pip install datasploit # Or $ git clone https://github.com/datasploit/datasploit $ pip install -r requirements.txt $ python datasploit.py google.com
They both perform OSINT work, so you can choose which works better for your OSINT activities. As for datasploit it does not have much public sources and stable ones as does theharvester
Features of datasploit
Datasploit has some notable features which include;
- Find emails
- Phone number information gathering
- Bitcoin address information gathering
The last two Phone number and Bitcoin address information gathering are unique to datasploit alone in the above tools.
In conclusion you can choose what ever you find helpful for your OSINT needs.