GhostTrack Features: IP Tracking, Phone Lookup, and Username OSINT Analysis

GhostTrack is a Python-based OSINT utility that combines IP geolocation, phone number validation, and cross-platform username checking into a single interactive command-line interface.

GhostTrack is an open-source intelligence (OSINT) tool maintained by HunxByts that aggregates multiple investigation capabilities into one lightweight Python script. Located in the HunxByts/GhostTrack repository, this utility leverages public APIs and specialized libraries to extract geolocation data, carrier details, and social media presence without requiring complex infrastructure.

Core GhostTrack Features

GhostTrack organizes its investigative capabilities into four distinct modules accessible through a colorful CLI menu.

IP Address Tracking

The IP Tracker module retrieves comprehensive geolocation and network data for any IPv4 or IPv6 address. Implemented in the IP_Track function within GhostTR.py (lines 40-78), this feature queries the public ipwho.is API and returns structured JSON data including:

  • IP type (IPv4/IPv6)
  • Country, city, and regional details
  • Latitude and longitude coordinates
  • ISP and ASN information
  • Local timezone
  • Direct Google Maps link generation

When executed, the function parses the API response and formats it into a readable report showing the target's approximate physical location and network infrastructure details.

Phone Number Analysis

GhostTrack's Phone Number Tracker validates and enriches international phone numbers using the phonenumbers library. The phoneGW function in GhostTR.py (lines 80-108) processes user input to extract:

  • Geographic location and region code
  • Carrier/operator name
  • Timezone mapping
  • Number validity status
  • Multiple formatted representations (national, international, and mobile formats)

This module requires numbers in international format (e.g., +14155552671) and handles parsing for most global numbering plans.

The Username Tracker performs automated reconnaissance across dozens of social media platforms. The TrackLu function (lines 121-158 in GhostTR.py) implements this by:

  1. Constructing profile URLs from a templated list including Facebook, Twitter, Instagram, GitHub, and others
  2. Executing HTTP GET requests to each endpoint
  3. Recording HTTP 200 responses as confirmed profile existence
  4. Reporting failures as "Username not found"

This technique enables rapid digital footprint assessment without requiring API keys or authentication tokens for the target platforms.

Public IP Display

For local network reconnaissance, the Show Your IP feature displays the machine's public IP address. The showIP function (lines 68-76 in GhostTR.py) queries https://api.ipify.org/ to reveal the external address behind NAT or VPN configurations.

Architecture and Implementation

GhostTrack employs a straightforward modular architecture centered on an interactive menu dispatcher.

Interactive Menu System

The user interface is driven by an options list that maps numeric selections to their corresponding tracker functions. The main() loop (lines 78-107 in GhostTR.py) orchestrates the program flow using:

  • is_option decorator: Ensures the ASCII banner prints before any tracking operation executes
  • call_option(): Validates user input against available choices
  • execute_option(): Wraps function calls with error handling and returns control to the menu loop

This design allows independent operation of each module while maintaining a consistent visual interface.

Utility Functions

Supporting the main trackers are utility functions defined in GhostTR.py:

  • clear(): Cross-platform terminal screen clearing (Windows cls and Unix clear)
  • run_banner(): Displays the GhostTrack ASCII art header

Installation and Basic Usage

GhostTrack requires Python 3 and dependencies listed in requirements.txt (requests, phonenumbers).

Install and launch the tool:

git clone https://github.com/HunxByts/GhostTrack.git
cd GhostTrack
pip3 install -r requirements.txt
python3 GhostTR.py

The interface presents four operational choices:

[ 1 ] IP Tracker
[ 2 ] Show Your IP
[ 3 ] Phone Number Tracker
[ 4 ] Username Tracker
[ 0 ] Exit

Tracking an IP Address

Select option 1 and enter a target IP:

Select Option : 1
Enter IP target : 8.8.8.8

============= SHOW INFORMATION IP ADDRESS =============
 IP target       : 8.8.8.8
 Type IP         : ipv4
 Country         : United States
 City            : Mountain View
 ...
 Maps            : https://www.google.com/maps/@37, -122,8z

Phone Number Investigation

Select option 3 and provide an international number:

Select Option : 3
Enter phone number target [+6281xxxxxxxxx] : +14155552671

========== SHOW INFORMATION PHONE NUMBERS ===========
Location             : United States
Region Code          : US
Timezone             : America/Los_Angeles
Operator             : AT&T
Valid number         : True
International format : +1 415-555-2671

Username Reconnaissance

Select option 4 to check platform availability:

Select Option : 4
Enter Username : johndoe

========== SHOW INFORMATION USERNAME ===========

[ + ] Facebook : https://www.facebook.com/johndoe
[ + ] Twitter : Username not found !
[ + ] Instagram : https://www.instagram.com/johndoe

Summary

GhostTrack delivers four primary investigative capabilities through a unified Python interface:

  • IP geolocation via the ipwho.is API with coordinate and ISP mapping
  • Phone metadata extraction using the phonenumbers library for carrier and timezone data
  • Cross-platform username enumeration across major social networks via HTTP probing
  • Local public IP revelation through the ipify API

The tool's architecture separates concerns through distinct functions (IP_Track, phoneGW, TrackLu, showIP) while the menu dispatcher in main() provides unified access to all OSINT modules.

Frequently Asked Questions

What is GhostTrack used for?

GhostTrack is an OSINT reconnaissance tool designed for security researchers and digital investigators who need to gather public information about IP addresses, phone numbers, and username availability across social platforms. It aggregates data from multiple public sources to create consolidated reports without requiring API keys or authentication for most functions.

What dependencies does GhostTrack require?

GhostTrack requires Python 3 and two primary external packages specified in requirements.txt: requests for HTTP operations and phonenumbers for phone number parsing. The IP tracking and username search functions rely on public web APIs (ipwho.is and various platform endpoints) that do not require authentication keys.

GhostTrack itself is a legal tool when used for legitimate security research, system administration, or authorized penetration testing. However, using it to stalk, harass, or conduct unauthorized surveillance violates most jurisdictions' laws. Users should ensure they have proper authorization before investigating specific targets and comply with data privacy regulations like GDPR.

How accurate is GhostTrack's IP geolocation?

IP geolocation accuracy in GhostTrack depends on the ipwho.is database, which typically resolves to the city or regional level. The tool provides ISP and ASN data that is generally reliable, but GPS coordinates represent the ISP's registered location rather than precise physical device positioning. Accuracy varies by IP type—residential IPs may resolve to nearby cities while VPN or proxy addresses show the server location.

Have a question about this repo?

These articles cover the highlights, but your codebase questions are specific. Give your agent direct access to the source. Share this with your agent to get started:

Share the following with your agent to get started:
curl -s "https://instagit.com/install.md"

Works with
Claude Codex Cursor VS Code OpenClaw Any MCP Client

Maintain an open-source project? Get it listed too →