laramies/theHarvester

Health v2 · maintenance only

Flags: no_license

Adoption not part of the score

17202 stars · 2563 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

theHarvester is a Python CLI tool that gathers open-source intelligence (emails, subdomains, hostnames, IPs, names, URLs, ASNs) about a domain from search engines, certificate transparency logs, DNS datasets, and other public sources. It includes a REST API and a browser-based workflow (HarvestView), with JSON/JSONL/XML/SQLite output for structured evidence.

Use cases

• enumerate subdomains of a target domain from passive sources
• find email addresses associated with a company for a phishing assessment
• gather reconnaissance data during the early stages of a penetration test
• collect hostnames and IPs from certificate transparency logs
• run passive OSINT against a domain before an authorized red team engagement
• export discovered assets to JSON or SQLite for further analysis

When to choose

• you need a single tool aggregating many passive OSINT sources for domain reconnaissance
• you want structured output (JSON, JSONL, SQLite) for evidence retention and integrations
• you are doing authorized red team or blue team asset discovery

When to avoid

• you need active scanning or exploitation rather than passive reconnaissance
• you require guaranteed availability of specific data sources, since providers control their own quotas and formats
• you lack authorization to test the target domain

Facets

cli-tool · maturity active

osint search-engine web-scraping cli security security osint penetration-testing python cli windows cross-platform reconnaissance subdomain-enumeration email-harvesting red-team threat-intelligence osint command-line linux macos docker

Member repositories

For agents

markdown · JSON · MCP: product_card(name="laramies/theHarvester")