Skip to content

feat: add 25 new modules across 8 categories#58

Open
og-arin wants to merge 1 commit into
megadose:mainfrom
og-arin:main
Open

feat: add 25 new modules across 8 categories#58
og-arin wants to merge 1 commit into
megadose:mainfrom
og-arin:main

Conversation

@og-arin

@og-arin og-arin commented May 26, 2026

Copy link
Copy Markdown

Summary

Extends ignorant with 25 new modules across 8 categories, significantly expanding phone number OSINT coverage beyond the original 3 sites.

New Modules

Category Modules
social_media facebook, twitter, tiktok, linkedin, pinterest, github, medium
messaging telegram, whatsapp, viber
dating tinder, bumble, hinge
communities reddit, discord, quora
shopping flipkart, blinkit, zepto
fintech paytm, phonepe
entertainment spotify
email_recovery google, facebook, twitter

New Feature: Email Recovery

Added a new email_recovery category that attempts to correlate a phone number to a masked email address (e.g. j***@gmail.com) via platform account recovery flows.

New optional field in output dict:

{
  "name": "twitter",
  "domain": "twitter.com",
  "method": "password_reset",
  "frequent_rate_limit": true,
  "rateLimit": false,
  "exists": true,
  "emailrecovery": "jo***@gmail.com"
}

Methods Used

  • Registration flow leak (number taken vs available)
  • Login/OTP flow (OTP sent = number exists)
  • Password reset flow (masked email leak)
  • Account recovery flow

Bug Fixes

  • Expanded hardcoded domain fallback dict in core.py to cover all new modules (previously only had 3 entries, caused crashes on unhandled exceptions)
  • Fixed typo: twiiter.pytwitter.py in email_recovery

⚠️ Ethical Notes

  • Tinder and Viber modules may send an OTP SMS to the target if their number is registered — same behavior as the existing Snapchat module
  • All other modules check existence passively without alerting the target
  • email_recovery modules only retrieve masked emails, no full email is exposed

Testing

  • Tested locally with ignorant <country_code> <phone>
  • All 25 modules load via auto-discovery without modification to the import system
  • Rate limit handling implemented on all modules

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant