# martinvigo/email2phonenumber

A OSINT tool to obtain a target's phone number just by having his email address

Repository: https://github.com/martinvigo/email2phonenumber
Canonical: https://ross.abutalabs.com/products/email2phonenumber
Homepage: https://www.martinvigo.com/email2phonenumber
Language: Python
License: MIT
License Family: permissive
Topics: osint, osinttool, privacy, hacking, password-reset, authentication
Last push: 2024-07-26T21:09:58+00:00

## Health v2 (maintenance only)
Score: 32/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 0, release rhythm 35, longevity 100
- inputs: {"age_days": 2726, "days_push": 768, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: no_releases
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 2747, forks 304 (observed 2026-08-28T04:07:17.458526+00:00)

## What it is
A Python OSINT tool that discovers a target's phone number from just their email address by abusing password reset flows that leak masked phone digits. It scrapes sites for digits, generates valid phone number candidates from numbering plans, and bruteforces masked emails via password resets.

## Use cases
- find someone's phone number from their email address
- scrape password reset pages for leaked phone digits
- generate a list of valid phone numbers matching a mask
- bruteforce masked emails to match a target phone number
- OSINT reconnaissance on a target's contact info

## When to choose
- you need a proof-of-concept demonstrating password reset information leakage
- you want to generate valid phone number dictionaries from a numbering plan
- you're researching OSINT techniques around account recovery flows

## When to avoid
- you need working scraping against major sites - Ebay, Lastpass, Amazon and Twitter have added captchas and email-code protections
- you want an actively developed tool - the author recommends the newer Phonerator for phone number generation
- you need a production or defensive security tool rather than a research PoC

## Facets
- artifact type: cli-tool
- maturity: maintenance
- function: osint, security, web-scraping, cli
- domain: osint, security, privacy, penetration-testing
- platform: python, cli, windows
- tags: password-reset-abuse, phone-number-enumeration, proof-of-concept, offensive-security, linux, macos

## Member repositories
- martinvigo/email2phonenumber (main) score 32

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:07:17.458526+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T08:19:01.151978+00:00, confidence not recorded.
  - readme: https://github.com/martinvigo/email2phonenumber (fetched 2026-08-28T04:07:17.458526+00:00, sha 6ed15e8d54a5)
  - homepage: https://www.martinvigo.com/email2phonenumber (fetched 2026-08-29T09:57:11.050875+00:00, sha 558d0a64cfcd)
  - site_page: https://www.martinvigo.com/about-me (fetched 2026-08-29T09:57:11.061122+00:00, sha 8a9a53ff61ac)
- Data as of 2026-08-30T08:39:29.467469+00:00.