Email Enumeration by Domain

input: domains | output: list of emails for input domains

Testing Methodology

  1. 1.
    check the same domain (i.e. microsoft.com) using each tool
    • count the number of results
  2. 2.
    rate difficulty of deployment
  3. 3.
    rate quality of output
  4. 4.
    rate development health
  5. 5.
    rate automation potential

Phonebook.cz

  • requires IntelX account to use (free signup)
  • 39,601 results for microsoft.com

Hunter

Example Results

  • 35,830 results
  • also shows email format (i.e. {f}.{last}@domain.com

Deployment Difficulty

  • web hosted (easy difficulty)
  • has API

Output

  • can export subset of records from web interface
  • can export full records using API (if credits available in account)

Pricing

  • $50-400/month depending on plan
  • free plan available, limited quota per month

Infoga

<todo>
  • "Infoga is a tool gathering email accounts informations (ip,hostname,country,...) from different public source (search engines, pgp key servers and shodan) and check if emails was leaked using haveibeenpwned.com API"
  • Language: python

skymem.info

Note: i have not confirmed this is a legitimate site

Example Results

  • 36631 results

Deployment Difficulty

  • web hosted (easy difficulty)
  • No API

Pricing

  • varies by results size, not transparent
  • large lists get into $2000-3000 range!!!