Web recon & crawling · open-source OSINT project
theHarvester
Collects public emails, names, subdomains, IPs, and URLs for a domain or organization, with passive and opt-in active modes.
View on GitHub ↗ Project homepage ↗
Before you use it
Passive modules are the safer default. DNS resolution and other active modules should be enabled only for an authorized scope.
At a glance
| Category | Web recon & crawling |
|---|---|
| Provider | laramies |
| Accepted input | authorized URL, domain |
| Access | Free |
| Privacy sensitivity | Moderate |
| Maintenance status | Active |
| Operating mode | Local or self-hosted investigation workflow |
| License | Not declared |
| GitHub stars | 17,177 |
| Repository last updated | 2026-08-24 |
| Last verified by OSINTCompass | 2026-08-23 |
Access and privacy
Access: Free
Open-source repository on GitHub. Local or self-hosted use may require API keys, accounts, models, or other third-party services.
Privacy sensitivity: Moderate
Infrastructure, case, or research queries may be logged by GitHub, APIs, model providers, or target services. Minimize identifiers and review scope.
Responsible use
- Respect robots.txt and rate limits; aggressive crawling can disrupt a site.
- Crawling or scanning systems you do not own may require authorization.
- Keep logs of what you collected and when.
Tags
Alternatives in Web recon & crawling
- Fast Google Dorks ScanThe OSINT project, the main idea of which is to collect all the possible Google dorks search combinations and to find the information about the specific web-site: common admin panels, the widespread file types and path traversal. The 100% automated.
- HostHunterHostHunter a recon tool for discovering hostnames using OSINT techniques.
- InfooozeA OSINT tool which helps you to quickly find information effectively. All you need is to input and it will take take care of rest.
- Karma V2⡷⠂𝚔𝚊𝚛𝚖𝚊 𝚟𝟸⠐⢾ is a Passive Open Source Intelligence (OSINT) Automated Reconnaissance (framework)
- OSINT Team LinksLinks for the OSINT Team