phoneinfoga

by sundowndev

15.3Kstars

4.5Kforks

693watchers

Updated 5 months ago

About

PhoneInfoga is an advanced OSINT tool that gathers detailed information and footprints on international phone numbers to aid in investigations.

Information gathering framework for phone numbers

Primary Use Case

This tool is primarily used by security researchers, threat intelligence analysts, and social engineers to perform reconnaissance on phone numbers. It helps users gather data such as country, carrier, line type, and potential owner information through various OSINT techniques and external APIs, enhancing risk assessment and investigative workflows.

Key Features

Check if a phone number exists
Gather basic information including country, carrier, and line type
Perform OSINT footprinting using external APIs, phone books, and search engines
Check reputation reports, social media presence, and disposable number status
Graphical user interface for browser-based scanning
Programmatic access via REST API and Go modules
Supports configuration of multiple scanners for enhanced effectiveness
Stable and production-ready with active maintenance

Installation

Clone the repository from GitHub
Install Go environment to build the tool
Build the project using Go build commands
Configure API keys for external services to enable full scanning capabilities
Run the tool locally for best performance and privacy
Optionally use the Docker image from Docker Hub for containerized deployment

Usage

>_ phoneinfoga scan -n +1234567890

Scan a phone number to gather basic info and OSINT data

>_ phoneinfoga gui

Launch the graphical user interface to run scans from the browser

>_ phoneinfoga api

Use the REST API for programmatic access to scanning features

Security Frameworks

Reconnaissance

Resource Development

Collection

Discovery

Initial Access

Usage Insights

Integrate PhoneInfoga with threat intelligence platforms to enrich phone number data for faster incident triage.
Use the REST API to automate phone number reconnaissance in phishing simulation campaigns for red and purple teams.
Leverage the tool's OSINT capabilities to validate suspicious phone numbers found in logs or alerts during blue team investigations.
Combine PhoneInfoga results with social engineering training to improve employee awareness of phone-based attacks.
Deploy PhoneInfoga locally with custom API keys to maintain privacy and reduce dependency on external services during investigations.