
项目说明
Phone OSINT In Framework
![Python 3.8+]()
![License: MIT]()
![Defensi]()
Professional-grade phone number intelligence platform implementing breach-first discovery architecture.
Searches breach databases by phone+name to disco emails/usernames, then enriches with TruePeopleSearch,
social media, and employment intelligence.
> Warning: This tool is for authorized security testing, defensi, and educational purposes only.
> Always obtain proper authorization before in phone numbers.
---
Key Features
Breach-First Discovery
Search DeHashed/LeakCheck/HIBP by phone+name (no emails required!)Disco emails, usernames, addresses from breach recordsHigh confidence matches (phone+name in same breach record = )Foundation for all downstream intelligence gatheringConditional Intelligence Gathering
Smart Mode (2+ emails): Skip pattern generation, keep profile scrapingFull Mode (<2 emails): Run comprehensiIntelligent decision-making based on a data qualityComprehensi
Name Discovery: Twilio Caller ID + NumBreach Search: DeHashed (phone/name/email/username) + LeakCheck + HIBPPeople Search: TruePeopleSearch (free, CAPTCHA-enabled)Email Discovery: LinkedIn, GitHub, theHar, HoleheUsername Enumeration: Sherlock (400+ sites), Maigret (2500+ sites)Social Media: 7 platforms (Facebook, Twitter, Instagram, LinkedIn, GitHub, Employment: Company/domain discoveryRisk Assessment: Multi-factor scoringProfessional Reporting
Modern Dashboard: Interactive HTML with Chart.js Classic Report: Comprehensive data tablesCollapsible Sections: Easy naStat Cards: Quick o metrics---
Quick Start
Installation
Run In
View Results
---
API Requirements
Essential (Required):
Num - Phone and carrier lookupGoogle Custom Search - Ad dorking capabilitiesHighly Recommended:
Twilio - Caller ID and name discovery (THE GRAIL!)Have I Been Pwned - Email breach checkingDeHashed - Multi-parameter breach search (phone/name/email/username)SerpAPI - Enhanced search with higher limitsOptional (Enhanced Results):
Hunter.io - Email discovery and Shodan - Internet device searchLeakCheck - Additional breach databaseIntelligence X - Dark web monitoringIPRoyal - Residential/mobile proxiesSee docs/API_SETUP.md for detailed configuration instructions.
---
In Flow
---
Performance
| Scenario | Time | Data Quality | Confidence |
|----------|------|--------------|------------|
| With Breach Data (2+ emails) | 3-5 min | 80% | 0.8-0.95 |
| Without Breach Data (<2 emails) | 8-12 min | 30% | 0.3-0.7 |
Smart Mode Benefits:
50-70% faster inHigher confidence scoresNo wasted pattern generationStill gets intelligence from LinkedIn/GitHub/Sherlock---
Dependencies
Core Python Packages:
requests, beautifulsoup4, selenium, phonenumberstwilio, google-api-python-clientflask, jinja2python-dotenOptional OSINT Tools:
Maigret - 2500+ platform username searchPhoneInfoga - Additional phone intelligenceSherlock - Included in frameworkSystem Requirements:
Python 3.8 or higherChrome/Chromium browser (for TruePeopleSearch)2GB+ RAM recommendedInternet connection---
Documentation
Installation Guide: docs/INSTALLATION.mdAPI Setup: docs/API_SETUP.mdBreach Search: docs/COMPREHENSI.mdTruePeopleSearch: docs/TRUEPEOPLESEARCH_SETUP.mdIPRoyal Proxies: docs/IPROYAL_SETUP.mdSocial Media OSINT: docs/SOCIAL_MEDIA.mdTroubleshooting: docs/TROUBLESHOOTING.mdCurrent Status: CURRENT_STATUS.mdBest Practices: CLAUDE.md---
Testing
Test All APIs:
Test Breach APIs:
Run Sample In:
---
Security
Ne:
config/.env (API keys and secrets)results/ (in data with PII).google-cookie (authentication tokens)Any files with personal/sensitive dataBefore Public Sharing:
Rotate all API keysClear results directoryReview git history for secretsTest with dummy data only---
Recent Updates (v2.0 - No 2025)
Major Features:
✅ Breach-first discovery architecture✅ DeHashed integration (multi-parameter search)✅ TruePeopleSearch integration (free people search)✅ Conditional email discovery (smart vs full mode)✅ Modern dashboard reports with ✅ Maigret integration (2500+ platforms)✅ IPRoyal proxy supportBug Fixes:
✅ Fixed email data loss bug✅ Fixed breach search early exit✅ Fixed Sherlock integration errors✅ Fixed Modern Report crashes✅ Fixed ChromeDri issues✅ Fixed HIBP and DeHashed API integrationsSee CHANGELOG.md for complete history.
---
Contributing
Contributions welcome! Please see CONTRIBUTING.md for guidelines.
---
License
MIT License - See LICENSE file for details.
---
Disclaimer
This framework is intended for:
Defensi inAuthorized penetration testingEducational and research purposesLegal compliance Not intended for:
Unauthorized surHarassment or stalkingPrivacy Illegal actiUsers are responsible for ensuring their use complies with all applicable laws and regulations (GDPR, CCPA, etc.).
---
Status: Production Ready | : 2.0 | Last Updated: No 2025
For detailed status and architecture, see CURRENT_STATUS.md.
项目信息
开发语言:Python
Star 数:17
技术要点
该项目属于防护思路方向的开源资源,代码结构清晰,适合安全研究人员学习参考。项目围绕Phone Deep (SO DEEP) OSINT Investigation Framework - Comprehensive phone number OSINT with aggressive name hunting capabilities for defensive security operations展开,提供了可运行的实现,对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。
从技术实现角度看,此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论,梳理项目的初始化流程、核心模块职责与数据流转,逐步掌握其中的技术细节与设计思路。
使用与学习建议
1. 下载源码压缩包,解压到本地环境。
2. 根据项目类型准备对应的运行环境与依赖。
3. 按照 README 中的步骤完成配置与部署。
4. 在隔离的测试环境中运行验证,避免影响生产系统。
免责声明
本资源来源于开源社区,仅供安全研究、技术学习与合法授权范围内的攻防演练使用,请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。