#!/usr/bin/env python

__version__ = '0.8-dev'

def banner():
    print "    ___ _                       _____        __                   "
    print "   / _ \ |__   ___  _ __   ___  \_   \_ __  / _| ___   __ _  __ _ "
    print "  / /_)/ '_ \ / _ \| '_ \ / _ \  / /\/ '_ \| |_ / _ \ / _` |/ _` |"
    print " / ___/| | | | (_) | | | |  __/\/ /_ | | | |  _| (_) | (_| | (_| |"
    print " \/    |_| |_|\___/|_| |_|\___\____/ |_| |_|_|  \___/ \__, |\__,_|"
    print "                                                      |___/       "
    print " PhoneInfoga Ver. %s                                              " % __version__
    print " Coded by Sundowndev                                              "
    print "\n"

print "\n \033[92m"
banner()
print "\033[94m"

import sys
import argparse

parser = argparse.ArgumentParser(description=
    "Advanced information gathering tool for phone numbers (https://github.com/sundowndev/PhoneInfoga) version %s" % __version__,
                                 usage='%(prog)s -n <number> [options]')

parser.add_argument('-n', '--number', metavar='number', type=str,
                    help='The phone number to scan (E164 or international format)')

parser.add_argument('-i', '--input', metavar="input_file", type=argparse.FileType('r'),
                    help='Phone number list to scan (one per line)')

parser.add_argument('-o', '--output', metavar="output_file", type=argparse.FileType('w'),
                    help='Output to save scan results')

parser.add_argument('-s', '--scanner', metavar="scanner", default="all", type=str,
                    help='The scanner to use')

parser.add_argument('--osint', action='store_true',
                    help='Use OSINT reconnaissance')

parser.add_argument('-u', '--update', action='store_true',
                    help='Update the tool & databases')

args = parser.parse_args()

# If any param is passed, execute help command
if not len(sys.argv) > 1:
    parser.print_help()
    sys.exit();

if args.update:
    print 'update'
    sys.exit()

import time
import hashlib
import json
import re

try:
    import requests
    from bs4 import BeautifulSoup
    import html5lib
    import phonenumbers
    from phonenumbers import carrier
    from phonenumbers import geocoder
    from phonenumbers import timezone
    from googlesearch import search
except:
    print code_error + 'Missing requirements. Try running pip install -r requirements.txt'

scanners = ['any', 'all', 'numverify', 'ovh']

def formatNumber(number):
    return re.sub("(?:\+)?(?:[^[0-9]*)", "", number)

def localScan(number):
    print code_info + 'Running local scan...'

    PhoneNumber = dict();

    FormattedPhoneNumber = "+" + formatNumber(number)

    try:
        PhoneNumberObject = phonenumbers.parse(FormattedPhoneNumber, None)
    except:
        return False
    else:
        if not phonenumbers.is_valid_number(PhoneNumberObject):
            return False

        PhoneNumber['full'] = phonenumbers.format_number(PhoneNumberObject, phonenumbers.PhoneNumberFormat.E164).replace('+', '')
        PhoneNumber['country'] = 'FR'
        PhoneNumber['countryCode'] = phonenumbers.format_number(PhoneNumberObject, phonenumbers.PhoneNumberFormat.INTERNATIONAL).split(' ')[0]
        PhoneNumber['number'] = phonenumbers.format_number(PhoneNumberObject, phonenumbers.PhoneNumberFormat.E164).replace(PhoneNumber['countryCode'], '')
        PhoneNumber['international'] = phonenumbers.format_number(PhoneNumberObject, phonenumbers.PhoneNumberFormat.INTERNATIONAL)

        print code_result + 'International format: %s' % PhoneNumber['international']
        print code_result + 'Local format: 0%s' % PhoneNumber['number']
        print code_result + 'Country code: %s' % PhoneNumber['countryCode']
        print code_result + 'Location: %s' % geocoder.description_for_number(PhoneNumberObject, "en")
        print code_result + 'Carrier: %s' % carrier.name_for_number(PhoneNumberObject, 'en')
        print code_result + 'Area: %s' % geocoder.description_for_number(PhoneNumberObject, 'en')
        for timezoneResult in timezone.time_zones_for_number(PhoneNumberObject):
            print code_result + 'Timezone: %s' % (timezoneResult)

        if phonenumbers.is_possible_number(PhoneNumberObject):
            print code_info + 'The number is valid and possible.'
        else:
            print code_warning + 'The number is valid but might not be possible.'

        return PhoneNumber

def numverifyScan(PhoneNumber):
    if not args.scanner == 'numverify' and not args.scanner == 'all':
        return -1

    print code_info + 'Running Numverify.com scan...'

    requestSecret = ''
    resp = requests.get('https://numverify.com/')
    soup = BeautifulSoup(resp.text, "html5lib")
    for tag in soup.find_all("input", type="hidden"):
        if tag['name'] == "scl_request_secret":
            requestSecret = tag['value']
            break;

    apiKey = hashlib.md5()
    apiKey.update(PhoneNumber + requestSecret)
    apiKey = apiKey.hexdigest()

    headers = {
        'host': "numverify.com",
        'connection': "keep-alive",
        'content-length': "49",
        'accept': "application/json, text/javascript, */*; q=0.01",
        'origin': "https://numverify.com",
        'x-requested-with': "XMLHttpRequest",
        'user-agent': "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3396.99 Safari/537.36",
        'content-type': "multipart/form-data; boundary=----WebKitFormBoundary7MA4YWxkTrZu0gW",
        'referer': "https://numverify.com/",
        'accept-encoding': "gzip, deflate, br",
        'accept-language': "en-US,en;q=0.9,fr;q=0.8,la;q=0.7,es;q=0.6,zh-CN;q=0.5,zh;q=0.4",
        'cache-control': "no-cache"
    }

    response = requests.request("GET", "https://numverify.com/php_helper_scripts/phone_api.php?secret_key=" + apiKey + "&number=" + PhoneNumber, data="", headers=headers)

    if response.content == "Unauthorized" or response.status_code != 200:
        print(code_error + "An error occured while calling the API (bad request or wrong api key).")
        return -1

    data = json.loads(response.content)

    if data["valid"] == False:
        print(code_error + "Error: Please specify a valid phone number. Example: +6464806649")
        sys.exit()

    InternationalNumber = '('+data["country_prefix"]+')' + data["local_format"]

    print(code_result + "Number: (%s) %s") % (data["country_prefix"],data["local_format"])
    print(code_result + "Country: %s (%s)") % (data["country_name"],data["country_code"])
    print(code_result + "Location: %s") % data["location"]
    print(code_result + "Carrier: %s") % data["carrier"]
    print(code_result + "Line type: %s") % data["line_type"]

    if data["line_type"] == 'landline':
        print(code_warning + "This is most likely a land line, but it can still be a fixed VoIP.")
    elif data["line_type"] == 'mobile':
        print(code_warning + "This is most likely a mobile, but it can still be a VoIP.")

def ovhScan(country, number):
    if not args.scanner == 'ovh' and not args.scanner == 'all':
        return -1

    print code_info + 'Running OVH scan...'

    querystring = { "country": country.lower() }

    headers = {
        'accept': "application/json",
        'cache-control': "no-cache"
    }

    response = requests.request("GET", "https://api.ovh.com/1.0/telephony/number/detailedZones", data="", headers=headers, params=querystring)

    data = json.loads(response.content)

    if isinstance(data, list):
        askedNumber = "0" + number.replace(number[-4:], 'xxxx')

        for voip_number in data:
            if voip_number['number'] == askedNumber:
                print(code_info + "1 result found in OVH database")
                print(code_result + "Number range: " + voip_number['number'])
                print(code_result + "City: " + voip_number['city'])
                print(code_result + "Zip code: " + voip_number['zipCode'] if voip_number['zipCode'] is not None else '')
                askForExit()

def osintScan(countryCode, number, internationalNumber):
    if not args.osint:
        return -1


    print code_info + 'Running OSINT footprint reconnaissance...'

    # Whitepages
    print(code_info + "Generating scan URL on 411.com...")
    print code_result + "Scan URL: https://www.411.com/phone/%s" % internationalNumber.replace('+', '').replace(' ', '-')

    try:
        # Social profiles: facebook, twitter, linkedin, instagram
        print(code_info + "Searching for footprints on facebook.com... (limit=5)")
        for result in search('site:facebook.com intext:"%s" | "%s"' % (number,number), stop=5):
            if result:
                print(code_result + "Result found: " + result)

        print(code_info + "Searching for footprints on twitter.com... (limit=5)")
        for result in search('site:twitter.com intext:"%s" | "%s"' % (number,number), stop=5):
            if result:
                print(code_result + "Result found: " + result)

        print(code_info + "Searching for footprints on linkedin.com... (limit=5)")
        for result in search('site:linkedin.com intext:"%s" | "%s"' % (number,number), stop=5):
            if result:
                print(code_result + "Result found: " + result)

        print(code_info + "Searching for footprints on instagram.com... (limit=5)")
        for result in search('site:instagram.com intext:"%s" | "%s"' % (number,number), stop=5):
            if result:
                print(code_result + "Result found: " + result)

        print code_warning + "Waiting 10 sec before sending new requests to avoid being blacklisted..."
        time.sleep(10)

        # Websites
        #

        # Documents
        print(code_info + "Searching for documents... (limit=5)")
        for result in search('intext:"%s" | intext:"%s" ext:doc | ext:docx | ext:odt | ext:pdf | ext:rtf | ext:sxw | ext:psw | ext:ppt | ext:pptx | ext:pps | ext:csv | ext:txt | ext:html' % (number,number), stop=5):
            if result:
                print(code_result + "Result found: " + result)

        print code_warning + "Waiting 10 sec before sending new requests to avoid being blacklisted..."
        time.sleep(10)

        print(code_info + "Searching for documents on washington.edu... (limit=5)")
        UWReq = search('site:washington.edu intext:"%s" | "%s"' % (number,number), stop=5)
        if len(list(UWReq)) > 0:
            print code_info + 'Found %s results' % len(list(UWReq))
        for result in UWReq:
            if result:
                print(code_result + "Result found: " + result)

        # Reputation
        print(code_info + "Searching for reputation report on whosenumber.info... (limit=1)")
        for result in search('site:whosenumber.info intext:"%s" intitle:"who called"' % number, stop=1):
            if result:
                print(code_result + "Found 1 result on whosenumber.info.")
                print(code_info + "This usually mean you are not the first to search about this number. Check the URL for eventual comments.")
                print(code_result + "URL: " + result)

        print(code_info + "Searching for Phone Fraud footprints... (limit=5)")
        for result in search('intitle:"Phone Fraud" intext:"%s" | "%s"' % (number,number), stop=5):
            if result:
                print(code_result + "Result found: " + result)
                print(code_info + "This usually mean you are not the first to search about this number. Check the URL for eventual comments.")

        # Temporary number providers
        print(code_info + "Searching for results on hs3x.com... (limit=1)")
        for result in search('site:"hs3x.com" intext:"+%s"' % number, stop=1):
            if result:
                print(code_result + "Found a temporary number provider: hs3x.com")
                print(code_result + "URL: " + result)
                askForExit()

        print(code_info + "Searching for results on receive-sms-now.com... (limit=1)")
        for result in search('site:"receive-sms-now.com" intext:"+%s"' % number, stop=1):
            if result:
                print(code_result + "Found a temporary number provider: receive-sms-now.com")
                print(code_result + "URL: " + result)
                askForExit()

        print(code_info + "Searching for results on receive-sms-online.com... (limit=1)")
        for result in search('site:"receive-sms-online.com" intext:"+%s"' % number, stop=1):
            if result:
                print(code_result + "Found a temporary number provider: receive-sms-online.com")
                print(code_result + "URL: " + result)
                askForExit()
    except:
        print code_error + 'Impossible to fetch Google search API. This usually mean you\'re temporary blacklisted.'

    print(code_info + "Searching for phone number on tempophone.com...")
    response = requests.request("GET", "https://tempophone.com/api/v1/phones")
    data = json.loads(response.content)
    for voip_number in data['objects']:
        if voip_number['phone'] == formatNumber(number):
            print(code_result + "Found a temporary number provider: tempophone.com")
            askForExit()

def askForExit():
    if not args.output:
        user_input = raw_input(code_info + "Continue scanning ? (Y/n): ")

        if user_input.lower() == 'n':
            print code_info + "Good bye!"
            sys.exit()
        else:
            return -1

def scanNumber(number):
    print code_title + "[!] ---- Fetching informations for %s ---- [!]" % formatNumber(number)

    PhoneNumber = localScan(number)

    if not PhoneNumber:
        print(code_error + "Error: number " + formatNumber(number) + " is not valid. Skipping.")
        sys.exit()

    numverifyScan(PhoneNumber['full'])
    ovhScan(PhoneNumber['country'], PhoneNumber['number'])
    osintScan(PhoneNumber['countryCode'], PhoneNumber['full'], PhoneNumber['international'])

    print '\n'

# Verify scanner option
if not args.scanner in scanners:
    print(code_error + "Error: scanner doesn't exists.")
    sys.exit()

if args.output:
    code_info = '[*] '
    code_warning = '(!) '
    code_result = '[+] '
    code_error = '[!] '
    code_title = ''

    sys.stdout = args.output
    banner()
else:
    code_info = '\033[97m[*] '
    code_warning = '\033[93m(!) '
    code_result = '\033[1;32m[+] '
    code_error = '\033[91m[!] '
    code_title = '\033[1m\033[93m'

if args.number:
    scanNumber(args.number)
elif args.input:
    for line in args.input.readlines():
        scanNumber(line)

if args.output:
    args.output.close()