Name, Phone, Gov Record
People Search/PII
This section will get stalker-ish real quick. While limited in usefulness for a penetration test, it can help you discover all the interesting data surrounding a person, or link data you have found back to an individual. For those who would like a premium all in one option, there are a few handy platforms that can make collection faster and easier.
People/PII Search tools
https://sociallinks.io/ - Premium collection of OSINT tools focusing on data gathered from social media and other sits.
Gamayun - Gamayun is a web based tool designed for conducting OSINT investigations when searching for emails, locations, phone number, aliases, and photos.
SL-Pro - SL Pro is a professional tool for searching data from social media accounts, the Darknet, blockchains, and internet data leaks. It comes with API Integrations that link to 1100 methods of search across 50+ sources of data on over 800 million identities, which makes it ideal for when performing OSINT on a person.
https://www.melissa.com/v2/lookups/ - Arguably one of the best search tools for people out there. Provides a massive amount of tools and resources to search people by name, address, phone number and so on. They also provide loads of other useful tools and resources including maps, federal data, property records and more.
https://socialcatfish.com - Find connections and verify a person's online identity using a name, image, email address, phone number, username or physical address.
https://gofindwho.com/ - Find people for free by phone number, name, email address, and username on Facebook and in public records.
https://effectgroup.io - One of the best tools for searching people by username, email address, real name or phone number and build a dossier on your target. Searches social media sites, data breaches, documents and much more. Requires a paid subscription after first search.
Name Search
Name search records can get muddy really quickly when dealing with names like "John Smith", however many tools will allow you refine the search with other data points such as location or other context. As with any search tool, the more data you feed it, the more accurate your results will be. As always I like to start with one of Michael Bazzell's handy tools, Name.html. This tool will search databases of names that will return associated data points for building a full profile of your target. From here, the next step is to start looking for any public records that may be associated with the name you are searching for. Remember to use location to aid in context.
Xlek - Searches millions of online records for a given name.
Thats Them - Find all sorts of information about a person including address, email, even their cars VIN number
Public Records - Search public government records for entries relating to your target.
Peekyou - Popular people search engine
BeenVerified - People search engine that can return people, vehicle, property and contact info.Volunteer OSINT
https://opensanctions.org/ - The persons of interest database
https://verecor.com/ - Generic people search site for U.S. citizens.
https://ufind.name/ - Search for a person's name and see matching results including LinkedIn and Facebook accounts, white page results, vehicle registration database entries, marketing data and more.
Telephone Numbers
Telephone Number Lookup Tools
Carrier lookup - Enter a phone number and returns the carrier name and whether the number is wireless or landline.
NumLookup - Free reverse phone lookup
Number Validator - Search phone number format and origin
CallerID check - A database of caller names used to identify the name of a caller when receiving an inbound call from the United States or Canada.
TrueCaller Caller ID check - One of the best CallerID utilities
Spy Dialer - Reverse phone number lookup for cell phones, VOIP and landlines.
https://seon.io/intelligence-tool/#phone-analysis-module - Confirm if the number is valid, and detect the origin country, carrier, and number type.
https://800notes.com/ - A crowd-sourced reverse phone number search. Good for identifying scammer numbers.
https://callername.com/ - Free phone number lookup service where you can look up a cell phone, VoIP or Landline number.
WhitePages - Find people, contact info & background checks
National Cellular Directory - Begin your comprehensive people search now
Phone Validator - Is it a cell phone or is it a landline or is it a fake?
Free Carrier Lookup - Enter a phone number and we'll return the carrier name
RocketReach - Your first-degree connection to any professional
sync.me - Find out who called
EmobileTracker - Track Mobile Owner Name, Location and Mobile Service Provider
Reverse Phone Lookup - Find Out The Owner Of A Phone Number
Government and Business Records
The US government loves paperwork, and thanks to many initiatives like the Freedom of Information Act, so much of what they gather is available for you to parse through. Business.html searches through multiple sources like public records, voter record, and court documents.
Legal Records Search Tools
Background checks - Search for mentions of a person in court cases, contact information, assets, police records and much more!
https://www.judyrecords.com/ - Search over 580 million United States court cases.
https://case.law/ - A free tool that allows you to search over 1.7 million U.S. federal cases and over 4.9 million state cases.
https://www.courtrecord.net/ - Search complete and up-to-date public court records in the U.S.
https://publicrecords.searchsystems.net/ - Search for United States public records.
Public Records - Search public government records for entries relating to your target.
Personell Records
Vital Records Search Tools - This site contains tools for finding immigration records, census records, vital records, and for dealing with calendars, maps, foreign alphabets, and numerous other applications. Some of these tools fetch data from other websites but do so in more versatile ways than the search tools provided on those websites. Created by Stephen P, Morse.
Business Records
https://search.gleif.org/ - Look up company information from Global Legal Entity Identifier Foundation (GLEIF).
https://opencorporates.com - Giant public database of corporate information.
SEC filings - All companies, foreign and domestic, are required to file registration statements, periodic reports, and other forms electronically through EDGAR. Anyone can access and download this information for free. Here you'll find links to a complete list of filings available through EDGAR and instructions for searching the EDGAR database.
Investigaiton MindMaps
Last updated
