Simple OSINT script to find Instagram profiles by name and e-mail/phone
yesitsme is a simple Python script which tries to find Instagram account associated with a specific name, e-mail and phone number. Leveraging dumpor.com indexing capabilities, it retrieves all usernames associated with a certain name and automatically compares the fetched toutatis obfuscated e-mail/phone with the given one, saving time and energy while doing online investigations.
eva@paradise:~$ git clone https://github.com/blackeko/yesitsme/eva@paradise:~$ cd yesitsmeeva@paradise:~$ pip3 install -r requirements.txteva@paradise:~$ python3 yesitsme.py -s SESSION_ID -n NAME -e EMAIL -p PHONE -t TIMEOUT
-s
"SESSION_ID"
sessionid cookie of your Instagram account (i.e. sockpuppet);
-n
"Name Surname"
Target name and surname (case insensitive);
-e
"a****[email protected]"
First and last letter of target e-mail;
-p
"+39 ** 09"
Area code and last two digits of target phone number;
-t
"10"
Timeout between each request (default = 0).
eva@paradise:~$ python3 yesitsme.py -s 5t3El3650d4Z7A3jA2%Y1R70vnYn%36U3 -n "John Doe" -e "j*****[email protected]" -p "+39 *** *** **09" -t 10
Three levels of match:
HIGH: name, e-mail and phone number (obfuscated) match;
MEDIUM: name and/or e-mail and/or phone match;
LOW: only one of them matches.
Name and e-mail (or phone number) are mandatory;
To leave e-mail/phone empty, simply set -e/-p " "
;
E-mail/phone asterisks are just for show and can be omitted;
If omitted, timeout is zero; it's recommended to set at least 10 seconds to avoid being detected;
Phone number must be in the same format as in the example, i.e. it must contain the area code (including plus symbol) and the whitespace;
When the match level is HIGH, it will prompt whether to stop or continue searching.
While logged in your Instagram account:
Right-click and click on Inspect Element to open the developer console;
Go to the Storage tab;
Expand the Cookies menu and check "sessionid" cookie.
Thanks to:
Toutatis
Dumpor