Lesson 20: Finding Addresses, Phone Numbers & More
Intelligence X (intelx.io) is a partially free OSINT search engine for emails, domains, IPs, URLs, Bitcoin addresses, and more. It also offers free forensic tools (covered later).
Using Intelligence X for Leaked Data
Setup: Visit intelx.io, create/login to an account for full access.
Basic Search: Query an email (e.g., Rishi Cabra's). Many results are redacted (requires pro plan, which is expensive — stick to free).
Tip for Unredacted Results: Click Advanced → Select only non-redacted options → Search.
Example: Searching "zsecurity" showed MX records (e.g., Google-hosted) — not always useful, but verifiable by opening files.
Targeted Email Search: Use Zaid's zaid@zsecurity.org:
- 2 results: One from exploit.in, another from Collection #1 (combo of breaches).
- Opening files and searching the email revealed the same password in both.
Yahoo Email Search: zaidazad@yahoo.com → 10 .txt files. Opening one and searching showed the password (hashed).
As shown, Intelligence X allows free access to leaked data in breaches without payment. In upcoming lectures, we'll cover downloading and locally searching full leaked databases.