PhoneInfoga – OSINT Information Gathering framework for Phone Numbers

by
PhoneInfoga

During an OSING investigation, the subject’s phone number can be a gateway to lots of information about the subject. So if you can get some real information about the subject then it may help to make some decisions on your specific target or topic. To make this possible we can use some opensource search engines directly, but this method is very tedious. To make this tedious work easy, I have an open-source tool that will help you to get the information easily from various search engines.

How PhoneInfoga Works?

Phoneinfoga search and explores open-source databases like Numverify, Google search, OVH, etc to collect standard and footprinting phone number information. This tool mainly works on dorks based method, query to google with different types of google dork parameter,s and provide the results.

Available scanners

  • Numverify
  • Google search
  • OVH

PhoneInfoga flow-diagram

Major Features

  • Check if a phone number exists and is possible
  • Check for reputation reports, social media, disposable numbers, and more
  • Gather standard information such as country, line type, and carrier
  • Scan several numbers at once
  • Use custom formatting for more effective OSINT reconnaissance
  • OSINT footprinting using external APIs, Google Hacking, phone books & search engines
  • NEW: Programmatic usage with Go modules
  • NEW: Run your own web instance as a service
  • NEW: Serve a web client along with a REST API to run scans from the browser

Anti-features

  • Does not claim to provide relevant or verified data, it’s just a tool!
  • Does not allow to get the precise phone location
  • Does not allow to “track” a phone or its owner in real-time

Installation of Phoneinfoga

Currently, the Phoneinfoga tool is available for three types of operating systems, Linux, Unix-based operating systems like macOS and Windows OS, etc.

Direct Installation in Linux machine

To install Phoneinfoga directly in the machine, we can use its base source code or binaries downloaded from its official Github repository.

To download this tool you have to just do is navigate to the Github repository of Phoneinfoga and download the specific OS-based version archive.

Download PhoneInfoga Tool

Now extract and run the binary. Use the following terminal commands for the installation of the Phoneinfoga tool. (Here I am using Kali Linux for this purpose)

# Extract the binary file
tar xvf phoneinfoga.tar.gz

# Run the tool binary
./phoneinfoga --help

There is no other installation required to use the framework.

Now you can use the tool directly from the terminal. If you want to make this tool globally then, move phoneinfoga binary file to /usr/bin/ directory. Follow the commands to make Phoneinfoga globally in the terminal.

# First navigate to phoneinfoga directory and
cp ./phoneinfoga /usr/bin/phoneinfoga

**This is the Recommended method.

Installation Using Docker

If you don’t want to run this tool directly on the os terminal and want to run the tool in the isolated environment then docker will help us. We have some publicly available Docker-based images that we can use. Follow the instructions to run the Phoneinfoga tool as docker.

We have two options,

  1. Directly pull the docker from the Docker hub and set up the docker container.
  2. Use Docker-compose to configure the docker container.

1. From Docker hub

Pull the repository directly from Docker hub

# Pull the repository
docker pull sundowndev/phoneinfoga:latest

# Then run the tool
docker run --rm -it sundowndev/phoneinfoga version

2. Docker-compose

We can use a single docker-compose file to run the tool.

FILE: docker-compose.yml

version: '3.7'

services:
    phoneinfoga:
      container_name: phoneinfoga
      restart: on-failure
      image: phoneinfoga:latest
      command: serve
      ports:
        - "80:5000"

To access the tool, open 5000 port of your local system.

Using PhoneInfoga for Phone Number Information gethering

PhoneInfoga Help Command

Here is the help command infomation from Phoneinfoga tool.

$ ./phoneinfoga --help
PhoneInfoga is one of the most advanced tools to scan phone numbers using only free resources.

Usage:
  phoneinfoga [command]

Examples:
phoneinfoga scan -n 

Available Commands:
  help        Help about any command
  scan        Scan a phone number
  serve       Serve web client
  version     Print current version of the tool

Flags:
  -h, --help   help for phoneinfoga

Use "phoneinfoga [command] --help" for more information about a command.

This tool provides multiple user interface for easy use,

  1. Run commands directly from Command Line Interface
  2. GUI based Web Client

1. Run directly from Command Line Interface

The scan help command displays all the available scan related information.

$ ./phoneinfoga scan --help
Scan a phone number

Usage:
  phoneinfoga scan [flags]

Flags:
  -h, --help            help for scan
  -n, --number string   The phone number to scan (E164 or international format)

To run the PhoneInfoga tool from the terminal, you need just scan command to get the information for a specific phone number or mobile number. Use -n flag for number.

# ./phoneinfoga scan -n <phonenumber>
$ ./phoneinfoga scan -n "+1 804-406-4234"

[i] Scanning phone number +1 804-406-4234
[i] Running local scan...
[+] Local format: (804) 406-4234
[+] E164 format: +18044064234
[+] International format: 18044064234
[+] Country found: +1 (US)
[+] Carrier: 
[i] Running Numverify.com scan...
[+] Valid: true
[+] Number: 18044064234
[+] Local format: 8044064234
[+] International format: +18044064234
[+] Country code: US (+1)
[+] Country: United States of America
[+] Location: Ashland
[+] Carrier: 
[+] Line type: landline
[i] Generating Google search dork requests...
[i] Social media footprints
[+] Link: https://www.google.com/search?q=site%3Afacebook.com+intext%3A%2218044064234%22+OR+intext%3A%22%2B18044064234%22+OR+intext%3A%228044064234%22
[+] Link: https://www.google.com/search?q=site%3Atwitter.com+intext%3A%2218044064234%22+OR+intext%3A%22%2B18044064234%22+OR+intext%3A%228044064234%22
[+] Link: https://www.google.com/search?q=site%3Alinkedin.com+intext%3A%2218044064234%22+OR+intext%3A%22%2B18044064234%22+OR+intext%3A%228044064234%22
[+] Link: https://www.google.com/search?q=site%3Ainstagram.com+intext%3A%2218044064234%22+OR+intext%3A%22%2B18044064234%22+OR+intext%3A%228044064234%22
[+] Link: https://www.google.com/search?q=site%3Avk.com+intext%3A%2218044064234%22+OR+intext%3A%22%2B18044064234%22+OR+intext%3A%228044064234%22
[i] Individual footprints
[+] Link: https://www.google.com/search?q=site%3Anuminfo.net+intext%3A%2218044064234%22+OR+intext%3A%22%2B18044064234%22+OR+intext%3A%228044064234%22
[+] Link: https://www.google.com/search?q=site%3Async.me+intext%3A%2218044064234%22+OR+intext%3A%22%2B18044064234%22+OR+intext%3A%228044064234%22
[+] Link: https://www.google.com/search?q=site%3Awhocallsyou.de+intext%3A%228044064234%22
[+] Link: https://www.google.com/search?q=site%3Apastebin.com+intext%3A%2218044064234%22+OR+intext%3A%22%2B18044064234%22+OR+intext%3A%228044064234%22
[+] Link: https://www.google.com/search?q=site%3Awhycall.me+intext%3A%2218044064234%22+OR+intext%3A%22%2B18044064234%22+OR+intext%3A%228044064234%22
[+] Link: https://www.google.com/search?q=site%3Alocatefamily.com+intext%3A%2218044064234%22+OR+intext%3A%22%2B18044064234%22+OR+intext%3A%228044064234%22
[+] Link: https://www.google.com/search?q=site%3Aspytox.com+intext%3A%228044064234%22
[i] Reputation footprints
[+] Link: https://www.google.com/search?q=site%3Awhosenumber.info+intext%3A%22%2B18044064234%22+intitle%3A%22who+called%22
[+] Link: https://www.google.com/search?q=intitle%3A%22Phone+Fraud%22+intext%3A%2218044064234%22+OR+intext%3A%22%2B18044064234%22+OR+intext%3A%228044064234%22
[+] Link: https://www.google.com/search?q=site%3Afindwhocallsme.com+intext%3A%22%2B18044064234%22+OR+intext%3A%2218044064234%22
[+] Link: https://www.google.com/search?q=site%3Ayellowpages.ca+intext%3A%22%2B18044064234%22
[+] Link: https://www.google.com/search?q=site%3Aphonenumbers.ie+intext%3A%22%2B18044064234%22
[+] Link: https://www.google.com/search?q=site%3Awho-calledme.com+intext%3A%22%2B18044064234%22
[+] Link: https://www.google.com/search?q=site%3Ausphonesearch.net+intext%3A%228044064234%22
[+] Link: https://www.google.com/search?q=site%3Awhocalled.us+inurl%3A%228044064234%22
[+] Link: https://www.google.com/search?q=site%3Aquinumero.info+intext%3A%228044064234%22+OR+intext%3A%2218044064234%22
[+] Link: https://www.google.com/search?q=site%3Auk.popularphotolook.com+inurl%3A%228044064234%22
[i] Temporary number providers footprints
[+] Link: https://www.google.com/search?q=site%3Ahs3x.com+intext%3A%2218044064234%22
[+] Link: https://www.google.com/search?q=site%3Areceive-sms-now.com+intext%3A%2218044064234%22+OR+intext%3A%228044064234%22
[+] Link: https://www.google.com/search?q=site%3Asmslisten.com+intext%3A%2218044064234%22+OR+intext%3A%228044064234%22
[+] Link: https://www.google.com/search?q=site%3Asmsnumbersonline.com+intext%3A%2218044064234%22+OR+intext%3A%228044064234%22
[+] Link: https://www.google.com/search?q=site%3Afreesmscode.com+intext%3A%2218044064234%22+OR+intext%3A%228044064234%22
[+] Link: https://www.google.com/search?q=site%3Acatchsms.com+intext%3A%2218044064234%22+OR+intext%3A%228044064234%22
[+] Link: https://www.google.com/search?q=site%3Asmstibo.com+intext%3A%2218044064234%22+OR+intext%3A%228044064234%22
[+] Link: https://www.google.com/search?q=site%3Asmsreceiving.com+intext%3A%2218044064234%22+OR+intext%3A%228044064234%22
[+] Link: https://www.google.com/search?q=site%3Agetfreesmsnumber.com+intext%3A%2218044064234%22+OR+intext%3A%228044064234%22
[+] Link: https://www.google.com/search?q=site%3Asellaite.com+intext%3A%2218044064234%22+OR+intext%3A%228044064234%22
[+] Link: https://www.google.com/search?q=site%3Areceive-sms-online.info+intext%3A%2218044064234%22+OR+intext%3A%228044064234%22
[+] Link: https://www.google.com/search?q=site%3Areceivesmsonline.com+intext%3A%2218044064234%22+OR+intext%3A%228044064234%22
[+] Link: https://www.google.com/search?q=site%3Areceive-a-sms.com+intext%3A%2218044064234%22+OR+intext%3A%228044064234%22
[+] Link: https://www.google.com/search?q=site%3Asms-receive.net+intext%3A%2218044064234%22+OR+intext%3A%228044064234%22
[+] Link: https://www.google.com/search?q=site%3Areceivefreesms.com+intext%3A%2218044064234%22+OR+intext%3A%228044064234%22
[+] Link: https://www.google.com/search?q=site%3Areceive-sms.com+intext%3A%2218044064234%22+OR+intext%3A%228044064234%22
[+] Link: https://www.google.com/search?q=site%3Areceivetxt.com+intext%3A%2218044064234%22+OR+intext%3A%228044064234%22
[+] Link: https://www.google.com/search?q=site%3Afreephonenum.com+intext%3A%2218044064234%22+OR+intext%3A%228044064234%22
[+] Link: https://www.google.com/search?q=site%3Afreesmsverification.com+intext%3A%2218044064234%22+OR+intext%3A%228044064234%22
[+] Link: https://www.google.com/search?q=site%3Areceive-sms-online.com+intext%3A%2218044064234%22+OR+intext%3A%228044064234%22
[+] Link: https://www.google.com/search?q=site%3Asmslive.co+intext%3A%2218044064234%22+OR+intext%3A%228044064234%22
[i] Running OVH API scan...
[+] Found: true
[+] Number range: ****Hidden****
[+] City: ****Hidden****
[+] Zip code: ****Hidden****
[i] Job finished.

Note: Country code and special chars such as ( ) - + will be escaped so no matter if you use that or not.

To confirm this information, just navigate resulted URLs and you will find something important about the phone number.

2. GUI based Web Client

The current version of Phoneinfoga is featured with the ability to scan phone numbers using a web interface. This functionality uses on REST-API method. The web interface can be initiated using the serve command.

The serve help command displays all the available scan-related information for GUI-based web client.

$ /phoneinfoga serve --help
Serve web client

Usage:
  phoneinfoga serve [flags]

Flags:
  -h, --help        help for serve
      --no-client   Disable web client (REST API only)
  -p, --port int    HTTP port (default 5000)

Phoneinfoga tool will use any specific given port number to run the web client. When the command for Phoneinfoga web-client initialization is fired, the given port number will be reserved by the tool. We use any desired and unused port number from the system.

Use -p flag with serve command to use the desired port number, as specified below.

To run the web-client follow the below instructions and commands,

# ./phoneinfoga serve -p  <port number>
$ ./phoneinfoga serve -p 8181

[GIN-debug] [WARNING] Creating an Engine instance with the Logger and Recovery middleware already attached.

[GIN-debug] [WARNING] Running in "debug" mode. Switch to "release" mode in production.
 - using env:	export GIN_MODE=release
 - using code:	gin.SetMode(gin.ReleaseMode)

[GIN-debug] GET    /api/                     --> gopkg.in/sundowndev/phoneinfoga.v2/api.healthHandler (3 handlers)
[GIN-debug] GET    /api/numbers              --> gopkg.in/sundowndev/phoneinfoga.v2/api.getAllNumbers (3 handlers)
[GIN-debug] GET    /api/numbers/:number/validate --> gopkg.in/sundowndev/phoneinfoga.v2/api.validate (4 handlers)
...

After firing server command with the port number, use your local IP and port number in a web browser to open Phoneinfoga’s web interface.

URL: http://127.0.0.1:8181/

PhoneInfoga tool scanner

Type the phone number in the input field to search for the information. The results will be shown as below.

1. Local scan

PhoneInfoga local scan

2. Numverify scan

PhoneInfoga Numverify scan

Google search will be done with many type of options like General footprints, Social networks footprints, Individual footprints, Reputation footprints, Temporary number providers footprints, etc.

PhoneInfoga Google search

We can verify the provided information by navigating to these result links.

PhoneInfoga google dorks

4. OVH Telecom scan

OVH telecom scan result will be shown in this section.

Extra Points for Phoneinfoga

Phoneinfoga Installtion in Termux

Phoneinfoga can also be installed in the android using termux. I mentioned some steps for the same:

  1. Open Google Play Store & Download:
    • Termux
    • Termux -API
  2. Open Termux and Type the following commands:
    • pkg update
    • pkg upgrade
    • pkg install python
    • pkg install python2
    • pkg install git
    • git clone https://github.com/abhinavkavuri/PhoneInfoga
    • ls
    • cd PhoneInfoga
    • ls
    • mv config.example.py config.py
    • ls
    • python3 -m pip install -r requirments.txt
    • ls
    • chmod +x *
    • ls
    • python3 phoneinfoga.py -n +(phone number with country code)

PhoneInfoga For Windows

As PhoneInfoga is a very popular tool for phone number information gathering, Its compatibility and support are also available for Windows OS. It’s a simple process to use this tool in Windows OS.

To get the PhoneInfoga tool for windows OS, just navigate to the PhoneInfoga official Github repository releases page and find the appropriate archive package for your system.

PhoneInfoga for windows Github release page

Now, extract archive package to file system.

PhoneInfoga for windows extract

The PhoneInfoga tool can only be executed by command line, so open the command prompt at the current working directory by pressing Shift+Mouse right click and then choose the “Open command window here” option. (You can also open the command prompt at any directory and then manually navigate to the PhoneInfoga tool directory)

PhoneInfoga for windows

Once the command prompt appears, execute the executable file “phoneinfoga.exe”. Use --help flag to get the help info.

phoneinfoga.exe --help
PhoneInfoga for windows help command

To scan for the phone number’s use scan command as following.

phoneinfoga.exe scan -n "<phone number>"
PhoneInfoga for windows scan

We can run the tool by its web interface. To do so, use serve command.

phoneinfoga.exe serve -p 8181
PhoneInfoga for windows web interface serve

Now you can access use the Phoneinfoga web interface using your local IP with the given port number as -p option.

PhoneInfoga for windows web interface scanner

So, this is how you can use the Phoneinfoga tool in Windows OS.

Python Based PhoneInfoga

To run python based PhoneInfoga tool, download or clone the repository form here.

Installation Process:

$ git clone https://github.com/sundowndev/PhoneInfoga
$ cd PhoneInfoga/
$ python3 -m pip install -r requirements.txt

Uses:

# Usage: python3 phoneinfoga.py -n  [options]
$ python3 phoneinfoga.py -n "+1 804-406-4234" -s ovh

FAQs

Counties like India’s phone numbers not working

PhoneInfoga tool can only find the phone number’s information if the information is available in the open source databases, whether it is from India or from any other countries.

Current Project Status

This project is stable and production-ready. Roadmap is here.

Conclusion

Phoneinfoga can help in getting the information for the temporary phone numbers. The footprinting information is quite a handy feature available in the tool. This tool is not ful-proof of the person’s phone number, a manual verification process is required to visit and test each link gathered by this tool.