email2phonenumber: obtain a target’s phone number just by having his email address
email2phonenumber
email2phonenumber is an OSINT tool that allows you to obtain a target’s phone number just by having his email address.
This tool helps automate discovering someone’s phone number by abusing password reset design weaknesses and publicly available data. It supports 3 main functions:
- “scrape” – scrapes websites for phone number digits by initiating a password reset using the target’s email address
- “generate” – creates a list of valid phone numbers based on the country’s Phone Numbering Plan publicly available information
- “bruteforce” – iterates over a list of phone numbers and initiates a password reset on different websites to obtain associated masked emails and correlate it to the victim’s one
Install
git clone https://github.com/martinvigo/email2phonenumber.git
pip install BeautifulSoup requests
Use
Scrape websites for phone number digits
python email2phonenumber.py scrape -e target@email.com
Generate a dictionary of valid phone numbers based on a phone number mask
python email2phonenumber.py generate -m 555XXX1234 -o /tmp/dic.txt
Find the target’s phone number by resetting passwords on websites that do not alert the target using a phone number mask and proxies to avoid captchas and other abuse protections
python email2phonenumber.py bruteforce -m 555XXX1234 -e target@email.com -p /tmp/proxies.txt -q
Demo
Copyright (c) 2019 Martin Vigo
Source: https://github.com/martinvigo/
