hey there this is a Irfan and welcome to ehacking platform you are watching an
interesting episode of cybersecurity how-to series this lecture focuses on
the subjects phone number and what valuable information can be extracted
from a particular phone number in this video I will discuss an interesting
OSINT tool called phoneinfoga. It is an
advanced information gathering an OSINT tool created for is to do the
investigation on a particular phone number what is what this tool is all
about and what it what it does well this tool PhoneInfoga gathers
standard information such as country area carrier and line type it uses the
external api's and you can see the number of api's and it also uses the
google dorks phone directories in order to footprint, it also checks the
reputation of a given number and uses various scam report platform to judge
the reputation of a given number. Well, as far as the installation is concerned the
installation and configuration is very smooth and easy you just for this
demonstration I am using an updated version of Kali Linux the python is up
to date you should also update your operating
system so that it will not get stuck in between. These are the dependencies or
the requirement to have this tool configured first of all you should have
the python version 3 installed or docker maybe so what I'm going to do now I'm
going to give a quick demonstration since I have already installed and
configure all configured all the requirements of this tools so
I will be very quick on this Hey here we go
okay it says that the it's already exists as I said that I have already
installed and configured everything you just need to and go inside this folder
or drive/directory you'll see these stops okay you need to install the
requirements as well otherwise it won't work you need to configure all the
required libraries and the API is you should hit this command in order to do
this here we go it's all the files all the required libraries already
configured on my machine that is why it is not installing anything
however since if you are doing it for the very first time you will see a lot
of installation going on there okay. Once you are done you just need to pick up
let's suppose you can say you want to see the number the version is it updated
or not phoneinfoga or Python you can see you can see this is this tool spirit
is the updated tool you can cross-check it with the git platform okay here you can
see the number of operations that can be performed for example you can if you
want to do bulk scanning you can put the particular file you will cut the result
out as well a profile if you want to do the let us say the complete OSINT
activity you you need to then use the recon operator and just use the - +
operator to specify a number so in this exercise what I'm
going to do I'm going to obey I've opened a classified website and I'm
going to pick a number and and on this number we will do our test for example I
want to test this service the objective is to test whether this company is a
legit company or this particular number belongs to a company or a valid number
or maybe it might be a temporary number as you can see this wipe services are
available on the internet okay you need to pick this number okay
that's suppose you want to do this test you need to put the alright you need to
mention the country code as well along with the number in a specific format
this is the country code you this hit enter you can see that it is generating
some result it says that this particular number this is the international format
this is local format it belongs to United States the city or area New
Jersey and then things going on it is waiting for some time okay so here is
the result now you can see that the geographical information of the number
it also cross-checked the information with the online service now verify it
seems a good match a location and since it is not displaying any carrier because
it's not a mobile number it says it is a landline number but still it can be a
fixed wipe number as well so we need to cross-check it if it depends on our
requirement as well this is the quick result
let's examine all the information all the results here you can see it has
asked me whether to run the test on the addition formats as
well says I have read I have added a predefined format and I said no you can
say yes if you want to do a in-depth analysis or in-depth research or this
particular number so it all depends on the objective again is it asked me to
check the temporary or disposable number providers platforms and I said yes
because I want it to know whether it is a legit number or another scan using you
know freely numbers available online free numbers or wipe numbers maybe so it
seems that it seems that it is not a disposable number because it's not
saying it it is not showing any result from the disposable number of websites
or services available online you can see we have got some result from Facebook as
well interesting do people search as well and
it it again asked me to do the asset investigation using the variation the
variety of formats and international platforms and I said no again it has you
know such the Twitter Linkedin and Instagram for the results as well so
this is the information that we have received of God and now we are going to
see you just need to open the link so that you can cross check cross check
what's in there okay so the first result okay so the first result says it is a
particular phone number this is registered in this particular location
you can see the phone number detail for that detail it is a fixed white and you
have got the hair provider el name as well spam Louis and apart from this we
have got the name of the company so this is the company if this company is the
owner of the number we can cross-check with this provider yes that
correct and we even got the address office address as well very good
and other people linked with this number we have got a name here you can see so
this is a person and the age as well just imagine the information available
online by just doing a quick search we can see the company associated with this
number or a person associated with the number you can see the previous location
of this particular person and the a possible address as well age as well
another tool that I recommend when you can see the family and relatives as well
anyway so if the more we go inside or in detail you will see lots of information
available online one website that i recommend is that's temp comm this is
another interesting website apart from the tool that I mentioned earlier you
should also use this website for reverse phone lookup as well ok so this is our
number we are touching on this website as well let's see what will you get
again the landline number telephone company location cross-checked
we have got a person name as well okay possible IP address of email address Wow
amazing isn't it now let's see other result it all
pointing towards the same company this this result the other ISM as well we
don't have any information any you know risk associated with this company risk
in terms of spam or you know fraud activities it is not a crime for any
number we can check this scam domain as well
this okay no record yet not scam bar so overall overall seems valid company okay
so this is this might be the page of this company that you can see the phone
number mentioned there as well amazing other you can you should check
the other results as well we have good very interesting information we now know
and know the name of the company associated with the number we can even
see the people associated with this number we can even go further and
investigate the company the business and the people further however this is not
the objective of this video so I'm not going to investigate the company further
but I recommend you to do a quick cross-check with the State Department as
well whether it is all registered business or not to do this you need to
open the pedigree State website for example in this case the New Jersey
State you know directory websites this name we have the business name we just
need to do a cross-check see the company name ok we can we will get the result
and we'll see the company ID as well ok so this is the entity ID this is the
company registered name and you can see when it is incorporated so lots of
information you can just imagine what you can do with all these information
even at a hacker can use all these information for the malicious purpose so
on our purpose is not that ok so ok one more demonstration that I want to do is
on the temporary number sorted he will see the difference between the alleged
or a temporary number ok so here you can see the several there are so many
websites available online there DS website provides temporary there are
different websites I mean if the online they are providing deep temporary or not
as possible number for example to verify your whatsapp to
do you know and all these scam or productivity's yeah so let's say what if
someone plays an ad with the juicing these kind of number how can you verify
her very dated for example this is the number that I want to test just need to
pick this number they are going to take some time so here's the result we have
got all the information on this number at this particular number with the
country code like this and this is a local format it it belongs to
Pennsylvania okay so we have also cross-check this
particular tool is also karate across check this we're not verified this seems
a landline but is still it is a fixed wipe or maybe temporary wipe online web
number here you can see this is the first result let's see it's a it is a
non fixed wipe phone numbered long to Pennsylvania it says it could be Skype
or Google Voice number provided by this these services so not a fixed landline
number still but you can see this we have got all the information from the
temporary or a disposable number providers we can even cross check and
then we'll get an idea that this is it belongs this number belongs to the
temporary number provider you can see what number refresh and you will see the
message these are the I as you can see these are the results people are getting
the temporary verification course so this is the temporary number and we
cannot trust this number we cannot trust a business the business or the service
provider associated this with this number all these other website or the
early or results use the same when we have we can see a Facebook page or a
Facebook post maybe I need to see mentioning this number strain isn't it
okay okay okay so C's it's not that number maybe walk for three wages
mention see it must be mentioned something on this speed that is why this
it the result you know came up we need to see will be this mentioned maybe in
the comment or this particular Pete we have mentioned it we did you see so far
it seems that this is not a legit number it is provided by you know the the it is
unknown fixed wipe number and can be used for temporary purpose purposes so
still so this is how you can verify the number we need to in the life sometimes
be if we don't receive anything any logic information if it's if it's okay
we need to see we need to see what's working what not you know this since the
demonstration of a effort single to just one tool imagine if we use this tool in
combination with the other ocean tool what wonder you can do you can see lots
of important or valuable information available online for free that can be
used to a lot at any hacking hacking or social engineering or manipulation
attack against a company service provider or even an individual so this
is it for this video the detailed article link of the detailed article
mentioned in the description given below along with my social channel profiles
you should that you should follow also I would like to see the you know the
recommendation or requests for the upcoming videos what would you like me
to to you know make with you about and of course you should follow and
subscribe this channel do not forget to hit the button so that you will get an
update whenever I upload a video so till the end care bye