قالب وردپرس درنا توس
Home / Tips and Tricks / Identifying Information Using a Phone Number Using the OSINT Tools «Null Byte :: WonderHowTo

Identifying Information Using a Phone Number Using the OSINT Tools «Null Byte :: WonderHowTo



Phone numbers often contain references to the owner's identity and can contain a lot of data during an OSINT exam. Starting with a phone number, we can search a large number of online databases in just a few clicks to get information about a phone number. This may include the network operator, the name and address of the owner, and even connected online accounts.

While a phone number may not necessarily appear as trusted information, an OSINT researcher can quickly find information that links a phone number to a multitude of other clues. The data can be used to determine if a phone number is a disposable VoIP number that hides the identity of the owner or a real person's cell phone. In the event that you buy something online or respond to an apartment ad, this information is incredibly useful.

For a hacker, the ability to turn a phone number into multiple connected online accounts, e-mail addresses, or screen names makes it a success. A perfect starting point for bigger things. A quick scan to find the operator of a phone number can provide everything a hacker needs for a well-designed phishing e-mail pretending to be from the victim's operator. Once a hacker can identify other details about the target that may be attached to the phone number, it is easy to identify the weakest link and attack the target using the information that has been dug up.

OSINT Phone Number Tools

Fast When looking for phone numbers, we can use both command-line and browser-based tools. Command-line tools have the benefit of ease of use and more customization, but require the installation and upgrade of Python. Today, we'll use a tool called Phoneinfoga to quickly determine if the number is associated with a one-way phone number.

  ___ _ _____ __
/ _  | __ ___ __ ___  _  _ __ / _ | ___ __ _ __ _
/ / _) / & # 39; _  / _  | & # 39; _  / _  /  / & # 39; _  | | _ / _  / _` | / _` |
/ ___ / | | | | (_) | | | | __ /  / / _ | | | | _ | (_) | (_ | | (_ | |
 / | _ | | _ |  ___ / | _ | | _ |  ___  ____ / | _ | | _ | _ |  ___ /  __, |  __, _ |
| ___ /
PhoneInfoga Ver. v1.6.4
Coded by Sundowndev 

One of the best sources for OSINT is Mike Bazzel's IntelTechniques website, which we will also focus on here. This website contains several custom tools that Bazzel has organized to be useful to researchers. Many of these tools are already included in Buscador OS, a virtual machine that can run an OS-OS-aware operating system.

The Scenario

As an example, let's take a business listing from a classification ad. How would we check that? If the ad comes from a licensed professional, can we then locate a license attached to the phone number? In a simple search for reverse phone numbers something can be found. However, to see the actual data, you need to use more than one reverse phone number search tool.

Step 2: Find a phone number with phoneinfoga

To search for a phone number, we just need to add the -n flag and then any number we want to search. If you use the argument – recon an advanced search is performed.

  ~ / PhoneInfoga $ python3 phoneinfoga.py -n 1717███9539 --recon

___ _ _____ __
/ _  | __ ___ __ ___  _  _ __ / _ | ___ __ _ __ _
/ / _) / & # 39; _  / _  | & # 39; _  / _  /  / & # 39; _  | | _ / _  / _` | / _` |
/ ___ / | | | | (_) | | | | __ /  / / _ | | | | _ | (_) | (_ | | (_ | |
 / | _ | | _ |  ___ / | _ | | _ |  ___  ____ / | _ | | _ | _ |  ___ /  __, |  __, _ |
| ___ /
PhoneInfoga Ver. v1.6.4
Coded by Sundowndev

[!] ---- Getting information for 1717███9539 ---- [!]
[*]   Running a local scan ...
[+] International Format: +1 717-███-9539
[+] Local Format: 717███9539
[+] Country Found: United States (+1)
[+] City / Territory: Pennsylvania
[+] Carrier:
[+] Time Zone: America / New_York
[i] The number is valid and possible.
[*] Running Numverify.com Scan ...
[!] Numverify.com is not available
[*] OVH scan is running ...
[*] Custom format reconfiguration is running ...
Footprint enlightenment for 717███9539
[+] URL: https://www.reverse-lookup.co/717-███-9539
[+] URL: http://staging.thatsthem.com/phone/717-███-9539
[+] URL: https://www.revealname.com/717-███-9539
[+] URL: https://www.okcaller.com/717███9586
[+] URL: http://www.ncsusigmanu.com/g-i/717/ig/███/9
Clarification of the footprint for 1 717███9539
Clarification of the footprint for 1 717 ███9539
Clarification of the footprint for 717 ███9539
[+] URL: http://phonelookupus.com/who-called-me/1/432███1704
Footprint Enlightenment for 717--9539
[+] URL: http://phonelookupus.com/who-called-me/1/432███1704
Footprint enlightenment for 717-███-9539
[+] URL: http://www.buzzfile.com/business/Rauch-█████████-███-██-██-████
[+] URL: https://www.whitepages.com/phone/1-717-███-9539
[+] URL: https://safer.fmcsa.dot.gov/query.asp?query_type=queryCarrierSnapshot&query_param=USDOT&query_string=1███367
[+] URL: https://www.manta.com/c/mtmr6yw/rauch-█████████-███
[+] URL: https://www.kw.com/kw/agent/██████rauch
Clarification of the footprint for +1 717-███-9539
[+] URL: https://phonescheck.com/717-███
[+] URL: https://mobphonescheck.com/717-███
[+] URL: http://en.popularphotolook.com/717-███-95
[+] URL: https://ownertelephone.com/1717███7777
[+] URL: http://opencallerlistings.com/listing/717-███-95
Clarification of the footprint for (+1) 717-███-9539
[+] URL: https://www.whitepages.com/phone/1-717-███-9539
[+] URL: https://www.whitepages.com/phone/1-717-███-9XXX
[+] URL: https://www.whitepages.ca/phone/1-717-███-9538
[+] URL: http: //www.google.comhttp: //mrnumber.com/1-717-███%3Fpage%3D4%26thousand%3D9
[+] URL: http: //www.google.comhttp: //uk.popularphotolook.com/717-███-95
Clarification of the footprint for + 1/717-███-9539
[+] URL: https://www.whitepages.com/phone/1-717-███-9539
[+] URL: https://www.whitepages.com/phone/1-717-███-95XX
[+] URL: https://www.whitepages.ca/phone/1-717-███-9538
[+] URL: http://mrnumber.com/1-717-███%3Fpage%3D4%26thousand%3D9
[+] URL: http://en.popularphotolook.com/717-███-95
Clarification of the footprint for (717) ███9539
[+] URL: http://phonelookupus.com/who-called-me/1/432███1704
Clarification of the footprint for (717) ███-9539
[+] URL: http://www.buzzfile.com/business/Rauch-█████████-███-██-██-████
[+] URL: https://www.whitepages.com/phone/1-717-███-9539
[+] URL: https://safer.fmcsa.dot.gov/query.asp?query_type=queryCarrierSnapshot&query_param=USDOT&query_string=1███367
[+] URL: https://www.manta.com/c/mtmr6yw/rauch-█████████-███
[+] URL: https://www.kw.com/kw/agent/██████rauch
Footprint Enlightenment for (717) ███.9539
Clarification of the footprint for (717) ███9539
[+] URL: http://phonelookupus.com/who-called-me/1/432███1704
Clarification of the footprint for (717) ███-9539
[+] URL: http://www.buzzfile.com/business/Rauch-█████████-███-██-██-████
[+] URL: https://www.whitepages.com/phone/1-717-███-9539
[+] URL: https://safer.fmcsa.dot.gov/query.asp%3Fquery_type%3DqueryCarrierSnapshot%26query_param%3DUSDOT%26query_string%3D1███367
[+] URL: https://www.manta.com/c/mtmr6yw/rauch-█████████-███
[+] URL: https://www.kw.com/kw/agent/██████rauch
Enlightenment of the Footprint for (717) ███.9539
[*] OSINT Footprint Enlightenment is on ...
[i] Scan URL on 411.com is generated ...
[+] Scan URL: https://www.411.com/phone/1-717-███-9539[19659021 male Would you like to use an extra format for this number? (Y / N) n

[i] ---- footprints of websites ----
[i] Search for Footprints on Websites ... (Limit = 10)
[+] Result found: https://www.reverse-lookup.co/717-███-9539
[+] Result found: https://www.revealname.com/717-███-9539
[+] Result found: https://who-called.biz/state/pennsylvania/phones/1717███0000
[+] Result found: http://v-postal-cn.com/phones/note_17172780000_1717███9999_all2.htm
[+] Result found: http://www.jihaoba.com/haoduan/xiaogan/1717███.htm
[+] Result found: http://sm.cidu.net/gujialogall.asp?hm=1717███
[+] Result found: https://review-call.com/1717███0000
[+] Result found: https://number-review.com/1717███0000
[+] Result found: https://fast-scan.com/1717███0000
[i] Search for documents ... (Limit = 10)
[i] ---- Reputation traces ----
[i] Search for reputation report on whosenumber.info ...
[i] In search of traces of telephone fraud ...
[i] Search for reputation report on findwhocallsme.com ...
[i] Search for reputation report on yellowpages.ca ...
[i] Search for reputation report on phonenumbers.ie ...
[i] Search for reputation report on who-calledme.com ...
[i] Search for reputation report on usphonesearch.net ...
[i] Search for reputation report on whocalled.us ...
[i] Search for reputation report on quinumero.info ...
[i] Search for reputation report on uk.popularphotolook.com ...
[i] URL is generated on scamcallfighters.com ...
[+] http://www.scamcallfighters.com/search-phone-1717███9539.html[19659021 lightboxesDo you want to search for temporary number providers? (Y / n) n

[i] ---- Social Media Footprints ----
[i] Search for tracks on facebook.com ...
[i] Looking for Footprints on twitter.com ...
[i] Looking for Footprints on linkedin.com ...
[i] Search for traces on instagram.com ...
[i] ---- Phone Books Footprints ----
[i] True People URL is generated ...
[+] https://www.truepeoplesearch.com/results?phoneno=+1717-███-9539
[i] Search for traces on numinfo.net ...
[i] Search for Footprints on Synchronization ...
[i] Search for tracks on whocallsyou.de ...
[i] Search for traces on pastebin.com ...
[i] Search for traces on whycall.me ...
[i] Search for footprints on locatefamily.com ...
[i] Search for traces on spytox.com ...

Do you want to run the OSINT scan again? (eg to use a different format) (y / N) n

[i] Scan finished. 

Sometimes, this tool allows you to be temporarily excluded from Google Search due to programming. It's annoying, but with a Google abuse exception listed at the end of the above video, it's easy to fix.

As you can see above, there are many links you can dive into are available in the issue.

Step 3: Accessing the IntelTechniques OSINT Portal

Now let's focus on the web tools that are free on the Bazzel website, as they are a bit easier to use than the command line tool above. For more information, see inteltechniques.com/menu.html. Then click on the "Phone number" tab.

A Submenu Appears When you click on "Phone Number" and select the "Phone Search Tool," the page displays many tools at once can search.

As you can see, this is a healthy mix of people search tools, phone book directories, fraud report sites, and social media links. These are free, public resources combined in a user-friendly search tool that allows anyone with a browser and an Internet connection to find out who is at the other end of a phone number.

You can enter a number in each tool in turn. The easiest way, however, is to enter the number in the box above and click on "Complete all".

Step 4: Find a Phone Number in IntelTechniques

In the search tool, type the number in the box next to the Fill All button and then click the button to automatically place the number in the remaining fields insert. Next, select "Send all" in the list of services to perform all searches on the phone number. All services are opened with the previously submitted search in different tabs or pop-ups (you may need to allow popups in your browser).

Step 6: Searching for verifiable information

Another search result displays the name of a business associated with the phone number is what we are looking for! If we can relate the name of a company and the name we found to the number, we can look for a source that we trust, such as Here we have a name, an address and a company name. Everything we need to check if a company exists.

Step 7: Checking with Primary Source Data

To check the information found, we should look up some primary source information that supports our discovery. In our case, the best search database is the US State Department's business database for the state in which we found the company. Here we were able to retrieve a valid business listing that matches the previously found address. Obviously, the person behind the online advertising is honest – after all, they're a licensed professional, a phone number can contain everything you need to find information about a destination. With tools like Phoneinfoga, you can quickly determine if a phone number is a disposable or a legitimate number. If the number is real, the tools on the IntelTecniques website can put together clues to create a picture of the person behind the phone number, sometimes in the truest sense of the word.

With the right tools, a single phone number can guide you from clue to clue. Put together everything you need to learn about a goal.

I hope you liked this tutorial on using phone numbers in an OSINT exam! If you have questions about this tutorial, contact me or email me on Twitter @KodyKinzie .

Do not Miss: How to use Maltego to research and break down data like an analyst

Cover photo by Justin Meyers / Null Byte; Screenshots of Kody / Null Byte




Source link