From Email Address to Phone Number - A New OSINT Approach

Discover a groundbreaking OSINT approach for obtaining phone numbers from email addresses in this 31-minute BSidesLV conference talk. Explore classic methodologies, attack vectors, and services used in this process. Learn about the North American Numbering Plan Administration, National Pooling Administration, and how to leverage exchanges. Delve into techniques such as USAM scraping, parsing, and bruteforcing. Gain insights on online services, including PayPal, and their role in this methodology. Address privacy concerns and understand the implications of shared data brokers. Conclude with recommendations and next steps for implementing this innovative OSINT technique.

Introduction
Welcome
Greetings
Privacy
Security
The Bad
Classic methodologies
Purpose
Exchanges
North American Numbering Plan Administration
National Pooling Administration
Example
Attack Vector
Services
Features
Victim USA
M Scrape
Generate
Parsing
Bruteforcing
Online Services
Recommendation
PayPal
Next Steps
Other Questions
Two Things
No Lock
Thank you
Shared data brokers
Privacy not security