Email2PhoneNumber: Obtain Phone Number via Email Address

Introduction

An open-source intelligence (OSINT) tool called Email2PhoneNumber enables you to discover a target’s phone number simply by knowing his email address.

Basic usage information

By exploiting the password reset email design flaws and publicly available data, this crude tool assists in automating finding someone’s phone number. It supports 3 primary functions:

  • “scrape” — scrapes websites for phone number digits by initiating password reset using the target’s email address
  • “generate” — creates a list of valid phone numbers based on the country’s Phone Numbering Plan and publicly available information
  • “Bruteforce” — iterates over a list of phone numbers and initiates password resets on different websites to obtain associated masked emails and correlate them to the victim’s one.

Requirements

  • Python 3.x
  • 3rd party libraries installed (BeautifulSoup and requests). Download using pip

pip3 install beautifulsoup4 requests

Once the 3rd party libraries are installed, download the script via git clone

git clone https://github.com/martinvigo/email2phonenumber

Usage

Help section

  • To access the help section of the Python script, run the following command if you are a beginner.

python3 email2phonenumber.py -h

Scrape websites for phone number digits

  • Run the installed Python script and enter the target’s email address after that

python3 email2phonenumber.py scrape -e target@email.com

  • Create a phone number dictionary using a phone number mask.

python3 email2phonenumber.py generate -m 555XXX1234 -o /tmp/dic.txt

Find the target’s phone number by changing passwords on websites that do not notify the target while using a phone number mask and proxies to get around captchas and other abuse protections.

python3 email2phonenumber.py bruteforce -m 555XXX1234 -e target@email.com -p /tmp/proxies.txt -q

Aman Mishra

Aman Mishra is a eJPT certified and always keen to learn new concepts and methodologies regarding cybersecurity.he is also a cyber security content writer and have passion for sharing my knowledge about the latest threads and trends in the industry.

Recent Posts

Kali Linux Commands Cheat Sheet: Complete Quick Reference

This cheat sheet covers the essential Kali Linux commands every pentester and ethical hacker uses…

2 weeks ago

What I Wish I Knew Before Learning Malware Analysis and Reverse Engineering

When I first started learning malware analysis and reverse engineering, I thought the hardest part…

2 weeks ago

git fetch vs git pull: How They Work and When to Use Each

Both git fetch and git pull talk to a remote repository, but they do very different things to your…

4 weeks ago

git cherry-pick Command: Apply Commits from Another Branch

Sometimes the change you need already exists, just on the wrong branch. A hotfix lands…

4 weeks ago

Best Email APIs for Secure Business Email: Why Developers Are Moving Beyond SMTP

Email is still one of the most important communication channels inside modern applications. Password resets,…

4 weeks ago

Nginx Commands in Linux: Start, Stop, Reload, Test, and Log

Nginx is a high-performance web server and reverse proxy trusted by some of the largest…

4 weeks ago