offensive-tools/osint/phoneinfoga/SKILL.md
Auth/lab ref: Phone number OSINT tool - gather carrier, location, and online presence data for phone numbers.
npx skillsauth add aeondave/malskill phoneinfogaInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
Phone number reconnaissance — carrier, country, online presence, breach data.
# Download from GitHub releases
# Or Docker
docker run --rm sundowndev/phoneinfoga scan -n +1234567890
# Scan a number (international format)
phoneinfoga scan -n +14151234567
# Start web UI
phoneinfoga serve
# → http://localhost:5000
| Command | Purpose |
|---------|---------|
| scan -n NUMBER | Full scan on number |
| serve | Launch web dashboard |
| --output json | JSON output |
Quick scan:
phoneinfoga scan -n +14151234567
Web dashboard for manual investigation:
phoneinfoga serve &
open http://localhost:5000
JSON output for automation:
phoneinfoga scan -n +14151234567 --output json > phone.json
Multiple numbers from file:
while read num; do
phoneinfoga scan -n "$num" --output json >> all_results.json
done < numbers.txt
Configured in ~/.phoneinfoga/config.yaml:
numverify_api_key: "YOUR_KEY" # numverify.com — validation + carrier
googlecse_api_key: "YOUR_KEY" # Google Custom Search Engine
googlecse_cx: "YOUR_CX_ID"
Without keys: basic OSINT via Google dorks only. With NumVerify: carrier, line type, country validation.
PhoneInfoga auto-generates dorks. Run manually for deeper coverage:
"+14151234567" site:linkedin.com
"+14151234567" site:facebook.com
"+14151234567" -site:yellowpages.com -site:whitepages.com
"+14151234567" "resume" OR "contact" OR "WhatsApp"
| File | When to load |
|------|--------------|
| references/api-setup.md | NumVerify setup, Google CSE config, alternative phone lookup sources |
development
Auth/lab ref: Unicorn Engine CPU-only emulation for shellcode, decryptors, custom VM handlers, instruction tracing, memory hooks, and register-level experiments.
development
Auth/lab ref: Renode board and SoC simulation for MCU/RTOS firmware, UART/GPIO/peripheral modeling, GDB remote debugging, REPL platforms, and RESC scripts.
development
Auth/lab ref: Qiling OS-layer binary emulation for PE/ELF/Mach-O/UEFI/shellcode with rootfs, syscall/API hooks, filesystem mapping, and runtime patching.
databases
Auth/lab ref: QEMU user-mode and full-system emulation for cross-arch binaries, firmware, kernels, disks, serial consoles, networking, and GDB stubs.