Name, Phone, Gov Record

People Search/PII

This section will get stalker-ish real quick. While limited in usefulness for a penetration test, it can help you discover all the interesting data surrounding a person, or link data you have found back to an individual. For those who would like a premium all in one option, there are a few handy platforms that can make collection faster and easier.
  • ​https://sociallinks.io/ - Premium collection of OSINT tools focusing on data gathered from social media and other sits.
    • ​Gamayun - Gamayun is a web based tool designed for conducting OSINT investigations when searching for emails, locations, phone number, aliases, and photos.
    • ​SL-Pro - SL Pro is a professional tool for searching data from social media accounts, the Darknet, blockchains, and internet data leaks. It comes with API Integrations that link to 1100 methods of search across 50+ sources of data on over 800 million identities, which makes it ideal for when performing OSINT on a person.
  • ​https://www.melissa.com/v2/lookups/ - Arguably one of the best search tools for people out there. Provides a massive amount of tools and resources to search people by name, address, phone number and so on. They also provide loads of other useful tools and resources including maps, federal data, property records and more.
  • ​https://socialcatfish.com - Find connections and verify a person's online identity using a name, image, email address, phone number, username or physical address.
  • ​https://gofindwho.com/ - Find people for free by phone number, name, email address, and username on Facebook and in public records.
  • ​https://effectgroup.io - One of the best tools for searching people by username, email address, real name or phone number and build a dossier on your target. Searches social media sites, data breaches, documents and much more. Requires a paid subscription after first search.
Name search records can get muddy really quickly when dealing with names like "John Smith", however many tools will allow you refine the search with other data points such as location or other context. As with any search tool, the more data you feed it, the more accurate your results will be. As always I like to start with one of Michael Bazzell's handy tools, Name.html. This tool will search databases of names that will return associated data points for building a full profile of your target. From here, the next step is to start looking for any public records that may be associated with the name you are searching for. Remember to use location to aid in context.
  • ​Xlek - Searches millions of online records for a given name.
  • ​Thats Them - Find all sorts of information about a person including address, email, even their cars VIN number
  • ​Public Records - Search public government records for entries relating to your target.
  • ​Peekyou - Popular people search engine
  • ​BeenVerified - People search engine that can return people, vehicle, property and contact info.Volunteer OSINT
  • ​https://opensanctions.org/ - The persons of interest database
  • ​https://verecor.com/ - Generic people search site for U.S. citizens.
  • ​https://ufind.name/ - Search for a person's name and see matching results including LinkedIn and Facebook accounts, white page results, vehicle registration database entries, marketing data and more.
Name.html
17KB
Text

Telephone Numbers

Telephone.html
37KB
Text

Government and Business Records

The US government loves paperwork, and thanks to many initiatives like the Freedom of Information Act, so much of what they gather is available for you to parse through. Business.html searches through multiple sources like public records, voter record, and court documents.
Business.html
12KB
Text
  • ​https://search.gleif.org/ - Look up company information from Global Legal Entity Identifier Foundation (GLEIF).
  • ​https://opencorporates.com - Giant public database of corporate information.
  • ​Public Records - Search public government records for entries relating to your target.
  • ​Background checks - Search for mentions of a person in court cases, contact information, assets, police records and much more!
  • ​SEC filings - All companies, foreign and domestic, are required to file registration statements, periodic reports, and other forms electronically through EDGAR. Anyone can access and download this information for free. Here you'll find links to a complete list of filings available through EDGAR and instructions for searching the EDGAR database.
  • ​Vital Records Search Tools - This site contains tools for finding immigration records, census records, vital records, and for dealing with calendars, maps, foreign alphabets, and numerous other applications. Some of these tools fetch data from other websites but do so in more versatile ways than the search tools provided on those websites. Created by Stephen P, Morse.
  • ​https://www.judyrecords.com/ - Search over 580 million United States court cases.
  • ​https://case.law/ - A free tool that allows you to search over 1.7 million U.S. federal cases and over 4.9 million state cases.
  • ​https://www.courtrecord.net/ - Search complete and up-to-date public court records in the U.S.
  • ​https://publicrecords.searchsystems.net/ - Search for United States public records.