Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/martinvigo/email2phonenumber
A OSINT tool to obtain a target's phone number just by having his email address
https://github.com/martinvigo/email2phonenumber
authentication hacking osint osinttool password-reset privacy
Last synced: 1 day ago
JSON representation
A OSINT tool to obtain a target's phone number just by having his email address
- Host: GitHub
- URL: https://github.com/martinvigo/email2phonenumber
- Owner: martinvigo
- License: mit
- Created: 2019-03-17T23:46:28.000Z (over 5 years ago)
- Default Branch: master
- Last Pushed: 2024-07-26T21:09:58.000Z (5 months ago)
- Last Synced: 2024-12-05T03:08:52.905Z (8 days ago)
- Topics: authentication, hacking, osint, osinttool, password-reset, privacy
- Language: Python
- Homepage: https://www.martinvigo.com/email2phonenumber
- Size: 65.4 KB
- Stars: 2,196
- Watchers: 56
- Forks: 261
- Open Issues: 10
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
- awesome-rainmana - martinvigo/email2phonenumber - A OSINT tool to obtain a target's phone number just by having his email address (Python)
- project-awesome - martinvigo/email2phonenumber - A OSINT tool to obtain a target's phone number just by having his email address (Python)
- jimsghstars - martinvigo/email2phonenumber - A OSINT tool to obtain a target's phone number just by having his email address (Python)
README
# email2phonenumber
email2phonenumber is an OSINT tool that allows you to obtain a target's phone number just by having his email address.
For full details check: [https://www.martinvigo.com/email2phonenumber](https://www.martinvigo.com/email2phonenumber)
Demo: [https://www.youtube.com/watch?v=dfvqhDUn81s](https://www.youtube.com/watch?v=dfvqhDUn81s)
***IMPORTANT:*** *email2phonenumber is a proof-of-concept tool I wrote during my research on new OSINT methodologies to obtain a target's phone number. The supported services (Ebay, Lastpass, Amazon and Twitter) have long added protections to protect from these type of scraping like having to receive a code over email first or simply adding captchas. There are of course many other sites that are still leaking phone number digits but I am focused on other research projects. Feel free to submit pull request if you want to add support for new sites.
Please check out my newer tool "[Phonerator](https://www.martinvigo.com/tools/phonerator/)", which is maintained and focuses on the novel aspect of this research, generating valid phone numbers.
[See more details](https://www.martinvigo.com/phonerator-an-advanced-valid-phone-number-generator/). There is also a small OSINT challenge in there... ;)
## Basic info
This tool helps automate discovering someone's phone number by abusing password reset design weaknesses and publicly available data. It supports 3 main functions:
* "scrape" - scrapes websites for phone number digits by initiating password reset using the target's email address
* "generate" - creates a list of valid phone numbers based on the country's Phone Numbering Plan publicly available information
* "bruteforce" - iterates over a list of phone numbers and initiates password reset on different websites to obtain associated masked emails and correlate it to the victim's one
## Setup
email2phonenumber was developed on Python 3.x
You will need couple 3rd party libraries: BeautifulSoup and requests. These can be easily installed with pip
```
pip3 install beautifulsoup4 requests
```
## Usage
Scrape websites for phone number digits
```
python3 email2phonenumber.py scrape -e [email protected]
```
Generate a dictionary of valid phone numbers based on a phone number mask
```
python3 email2phonenumber.py generate -m 555XXX1234 -o /tmp/dic.txt
```
Find target's phone number by resetting passwords on websites that do not alert the target using a phone number mask and proxies to avoid captchas and other abuse protections
```
python3 email2phonenumber.py bruteforce -m 555XXX1234 -e [email protected] -p /tmp/proxies.txt -q
```
## Demo video
[](https://www.youtube.com/watch?v=dfvqhDUn81s)
## Tool presentation at BSides Las Vegas 2019
[](https://www.youtube.com/watch?v=1zssBR85vDA)
## Authors
Martin Vigo - @martin_vigo - [martinvigo.com](https://www.martinvigo.com)