Information Gatheringemailharvestingsearch enginesosintreconnaissance

EmailHarvester

EmailHarvester is a tool to retrieve domain email addresses from popular search engines. It supports exporting results to TXT and XML files with options for limiting results and using proxies.

Description

EmailHarvester is designed for harvesting email addresses associated with a specific domain using various search engines such as Google, Bing, Yahoo, ASK, Baidu, Dogpile, and Exalead. It is particularly useful in reconnaissance phases of penetration testing or OSINT investigations where identifying contact emails can provide valuable leads.

Key features include the ability to limit search results, define custom User-Agent strings, and utilize proxy servers for anonymity. The tool also supports a plugins system, allowing searches on popular websites like Twitter, LinkedIn, Google+, Github, Instagram, Reddit, and Youtube via search engines.

Results can be saved in both TXT and XML formats, making it easy to process or integrate with other tools. It is lightweight with an installed size of 70 KB and depends on common Python3 libraries including colorama, requests, termcolor, and validators.

How It Works

EmailHarvester operates by querying selected search engine plugins to retrieve pages containing email addresses linked to the target domain. It uses HTTP requests with configurable User-Agent and proxy support to fetch and parse search results. Plugins handle specific engines and sites, extracting emails through pattern matching and validation, then optionally saving to TXT and XML files.

Installation

bash
sudo apt install emailharvester

Flags

-h, --helpshow this help message and exit
-d, --domain DOMAINDomain to search.
-s, --save FILESave the results into a TXT and XML file (both).
-e, --engine ENGINESelect search engine plugin(eg. '-e google').
-l, --limit LIMITLimit the number of results.
-u, --user-agent USER-AGENTSet the User-Agent request header.
-x, --proxy PROXYSetup proxy server (eg. '-x http://127.0.0.1:8080')
--noprintDo not print results to screen
-r EXCLUDED_PLUGINSExcluded plugins
-pUse all plugins

Examples

Show the help message and usage information.
emailharvester -h
Search for email addresses associated with the domain example.com using default settings.
emailharvester -d example.com
Search example.com and save results to results.txt and results.xml files.
emailharvester -d example.com -s results
Search example.com using only the Google search engine plugin.
emailharvester -d example.com -e google
Search example.com and limit results to 100.
emailharvester -d example.com -l 100
Search example.com with a custom User-Agent string.
emailharvester -d example.com -u 'Mozilla/5.0'
Search example.com using a proxy server at http://127.0.0.1:8080.
emailharvester -d example.com -x http://127.0.0.1:8080
Updated 2026-04-16kali.org ↗