email2phonenumber
OSINT tool that obtains a target's phone number using only their email address by exploiting password reset mechanisms and public data sources.
Description
email2phonenumber is an OSINT tool designed to discover phone numbers associated with email addresses. It automates the process by abusing weaknesses in password reset functionality across various websites and leveraging publicly available phone numbering plan data.
The tool supports three primary functions: scraping websites for phone number digits via password reset initiation, generating lists of valid phone numbers based on country-specific numbering plans, and bruteforcing phone numbers against online services to correlate masked emails with the target.
Use cases include OSINT investigations, reconnaissance, and target profiling where email addresses are known but phone numbers need to be discovered through automated enumeration techniques.
How It Works
The tool operates through three main modes. 'Scrape' initiates password reset requests using the target email on multiple websites, extracting partial phone number digits from the reset pages. 'Generate' creates comprehensive lists of valid phone numbers using public Phone Numbering Plan data like NANPA records. 'Bruteforce' iterates through generated phone number lists, triggers password resets on various services, and matches returned masked emails to identify the correct number associated with the target email.
Installation
sudo apt install email2phonenumberFlags
Examples
email2phonenumber -hemail2phonenumber scrapeemail2phonenumber generateemail2phonenumber bruteforceemail2phonenumber scrape target@example.comemail2phonenumber generate --country USemail2phonenumber bruteforce phonelist.txt target@example.com