aeondave/phoneinfoga
offensive-tools/osint/phoneinfoga/SKILL.md
Auth/lab ref: Phone number OSINT tool - gather carrier, location, and online presence data for phone numbers.
$ install --global
skillsauthnpx skillsauth add aeondave/malskill phoneinfogaInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Jun 8, 2026, 4:00 AM341.9s2 files scanned
SKILL.md
- name:
- phoneinfoga
- description:
- Auth/lab ref: Phone number OSINT tool - gather carrier, location, and online presence data for phone numbers.
- license:
- MIT
- compatibility:
- Go binary; Linux/macOS/Windows.
- author:
- AeonDave
- version:
- 1.1
PhoneInfoga
Phone number reconnaissance — carrier, country, online presence, breach data.
Quick Start
# Download from GitHub releases
# Or Docker
docker run --rm sundowndev/phoneinfoga scan -n +1234567890
# Scan a number (international format)
phoneinfoga scan -n +14151234567
# Start web UI
phoneinfoga serve
# → http://localhost:5000
Core Commands
| Command | Purpose |
|---------|---------|
| scan -n NUMBER | Full scan on number |
| serve | Launch web dashboard |
| --output json | JSON output |
Information Retrieved
- Country, carrier, line type (mobile/landline/VoIP)
- Possible owner via reverse lookup
- Google dork results (social media, directories)
- NumVerify / Numinfo API data (if configured)
- Breach lookups (HaveIBeenPwned linked accounts)
Common Workflows
Quick scan:
phoneinfoga scan -n +14151234567
Web dashboard for manual investigation:
phoneinfoga serve &
open http://localhost:5000
JSON output for automation:
phoneinfoga scan -n +14151234567 --output json > phone.json
Multiple numbers from file:
while read num; do
phoneinfoga scan -n "$num" --output json >> all_results.json
done < numbers.txt
API Keys (Optional, Extend Results)
Configured in ~/.phoneinfoga/config.yaml:
numverify_api_key: "YOUR_KEY" # numverify.com — validation + carrier
googlecse_api_key: "YOUR_KEY" # Google Custom Search Engine
googlecse_cx: "YOUR_CX_ID"
Without keys: basic OSINT via Google dorks only. With NumVerify: carrier, line type, country validation.
Google Dork Expansion
PhoneInfoga auto-generates dorks. Run manually for deeper coverage:
"+14151234567" site:linkedin.com
"+14151234567" site:facebook.com
"+14151234567" -site:yellowpages.com -site:whitepages.com
"+14151234567" "resume" OR "contact" OR "WhatsApp"
Resources
| File | When to load |
|------|--------------|
| references/api-setup.md | NumVerify setup, Google CSE config, alternative phone lookup sources |
Related Skills
aeondave/vibe-audit-technique
development
VerifiedTrustedCommunity
White-box auditing methodology for AI-generated ('vibe-coded') applications. Focuses on modern stack misconfigurations (Supabase, Next.js, Vercel).
4SKILL.mdUpdated Jun 12, 2026
aeondave/source-review-technique
development
VerifiedTrustedCommunity
Hybrid AI/Deterministic SAST methodology for discovering zero-day vulnerabilities in source code. Orchestrates structural search with AI-driven data flow and sink validation.
4SKILL.mdUpdated Jun 12, 2026
aeondave/hardware-technique
development
VerifiedTrustedCommunity
Auth assessment: hardware/embedded methodology; UART/JTAG/SWD/SPI/I2C, firmware extraction, boot/debug paths, embedded OS evidence.
4SKILL.mdUpdated Jun 12, 2026
aeondave/container-technique
devops
VerifiedTrustedCommunity
Container methodology: Identifying containerization limits, Docker/K8s misconfigurations, and executing escapes to the host node.
4SKILL.mdUpdated Jun 12, 2026