A penetration tester wants to gather email information for a targeted phishing campaign. Which tool could they use?

• A. theHarvester
• B. Nmap
• C. Metasploit
• D. Nessus

Answer: (A)

Gathering email information for a targeted phishing campaign relies on OSINT recon that pulls contact details from publicly available sources. theHarvester is built for this purpose. It scans a variety of public data sources—search engines, social networks, public data dumps, and other public-facing services—to collect email addresses, domain names, and related infrastructure. This makes it ideal for quickly compiling a list of potential recipients and associated domains you might target in a phishing effort, and it can export the results for use in later stages of the engagement.

Other tools are not suited to this specific task. Nmap focuses on discovering open ports and service details on network hosts, not on extracting email addresses or contact information. Metasploit is an exploitation framework used to develop and run exploits, with no primary function for gathering target email lists. Nessus is a vulnerability scanner that inventories vulnerabilities across systems, not for collecting email-based contact data for phishing.