Snapchat is the next bridged database that I would like to cover to find someone's phone number.
Now, this data breach occurred in 2014, so you will be able to find Snapchat users partial phone numbers
in this data leak.
So you have to expect that you are going to find only users that have created their accounts before
2014.
And the way this database got leaked is by abusing Snapchat API to resolve usernames to phone numbers.
Now, this database does not contain any password, it only contains usernames and partial phone numbers.
And we are going to learn how we can utilize and weaponize this database to find someone's full phone
number.
Now, to download this database, all you have to do is just go to the link in the resources of this
lecture and then click on seven zip to download a 32MB file.
So in my case, I have already downloaded.
Here it is.
I'm going to right mouse click and then say extract all.
And then I'm going to say extract.
And now I'm going to get a txt file.
And to see how this txt file looks like I'm going to click on it because it's not very large.
It's only 170MB.
And you will see here Snapchat usernames and partial phone numbers that ends with XXS.
Now I have already searched for Rishi Kabra within this data breach, and I wasn't able to find his
Snapchat account because I believe that he created his account after 2014.
But to show you a real life example, I'm going to find the phone number of this Snapchat account so
we can see that the username of this person is Clair's Mensah I believe and this is how she looks like.
So she has brown hair and blue eyes and she is white.
So I'm going to copy the username and then open Agent Transact and then search for this username within
this txt file.
So I'm going to put the username.
And then I'm going to say start.
And as you can see we were able to get a match.
Now we can see that this is not a full phone number.
The last two digits are replaced with x.
So I'm going to copy the phone number and the username and open a.
TXT file and put it in here.
Let me copy the phone number and add it in here.
And now to find the full phone number we are going to use Facebook to find if she has a Facebook account
and if she has a Facebook account.
We are going to click on forgot my password and this might reveal the last two digits.
So I'm going to copy here username and then go to Facebook and put it in here.
Now you can search for the username or for her full name.
But in our case we were able to find someone who lives in New York.
So I'm going to click on this profile.
And then I'm going to copy the URL and then open an incognito tab and go to Facebook.
And now I'm going to click on forgot Account and put the URL.
And then you want to click on Try Another Way.
And we can see that there is a phone number that's associated with this account that ends with one three.
So I'm going to copy these two digits.
And by coming back to my txt file I can replace the double x with these numbers.
So let me copy this number again and go to Facebook I'm going to say plus one for USA and then enter
the phone number and then click on search.
And we can see that this phone number is also associated with the Facebook account that has an email
address that starts with C, which is similar to the email address that we have seen before.
So if I searched for Claire again, we can see that her email address also starts with C.
So I believe that this is here for number.
So in this lecture we have learned how you can utilize and weaponize Snapchat database to find someone's
phone number.
Now this is not always going to work for you.
You might not be able to find the person, or you might not be able to find the person's Facebook account.
So this is not something that's going to work all the time.
But I think that knowing this will improve your awareness and help you to develop your own Osint methodologies
and techniques.