How can I get emails from a domain?

Mark Eternally said:

Some quick thoughts on this...

Do not make stupid decisions. Use common sense. Know the boundaries. Be safe. You are responsible for *your* actions.

1) Familiarize yourself with black hat data dumps, specifically in the dark web. The idea here is for you to search as many stolen data dumps as you can, looking for your target domain(s). For example:
1.a) If you are targeting domain.tld and want to find actual email addresses used with this domain, for example [email protected] and [email protected] then be on the lookout for data dumps.
1.b) If a data dump takes place, perhaps from a major streaming service, then you would locate that data dump and search it to see if there are any hits for "@domain.tld".

2) https://www.kali.org/tools/emailharvester/ :: https://github.com/laramies/theHarvester :: https://github.com/nettitude/Prowl :: https://github.com/righteousgambit/quiet-riot :: https://www.geeksforgeeks.org/smtp-enumeration/

BTW, you may want to learn more about "email enumeration" or just "enumeration" in general.

Click to expand...

gigger said:

This is exactly what I was looking for, thanks!

Click to expand...

• Windows button + R
• Type: control
  • Press Enter
• Click: Programs
• Click: Turn Windows features on or off
• Click/Check: Telnet Client
  • Click: OK
• Reboot
• Login to Windows
• Windows button + R
• Type: cmd
  • Press Enter
• Type: telnet
  • Press Enter
• Type: ?
  • Press Enter
• Continue with other HowTo... https://www.geeksforgeeks.org/smtp-enumeration/

gigger said:

Please recommend services that could potentially (bonus if open source and free) retrieve active emails from only a domain name without scraping apart from the typical [email protected]?

Also are there any open source scrapers that could parse a website for any emails it can find?

Click to expand...