612 ·GitHub
What is this?
GetContact CLI is a Python command-line tool that talks directly to the GetContact phone-lookup API, letting you check a number's display name, tags and email without installing the Android app or using a browser.
GetContact CLI is a Python command-line tool that talks directly to the GetContact phone-lookup API, letting you check a number's display name, tags and email without installing the Android app or using a browser.Is this an official GetContact client or a reverse-engineered one?It's an independent, reverse-engineered client that mimics the official GetContact Android app (version 8.4.0) at the protocol level and has no official affiliation with GetContact.
It's an independent, reverse-engineered client that mimics the official GetContact Android app (version 8.4.0) at the protocol level and has no official affiliation with GetContact.How do I start using it?Run `python gtc.py` with Python 3.9+ installed; without any arguments it shows a numbered interactive menu, or you can call subcommands like search, batch, quota, captcha, generate and cred directly for scripting.
Run `python gtc.py` with Python 3.9+ installed; without any arguments it shows a numbered interactive menu, or you can call subcommands like search, batch, quota, captcha, generate and cred directly for scripting.Do I need my own GetContact account to use it?Yes — you need valid GetContact credentials, either imported from an existing account or freshly generated with the generate command, which registers a fake device and verifies ownership via a WhatsApp message.
Yes — you need valid GetContact credentials, either imported from an existing account or freshly generated with the generate command, which registers a fake device and verifies ownership via a WhatsApp message.What happens if I search too fast or run out of quota?Sending requests too quickly triggers a captcha (HTTP 403) that you solve with the captcha command, and an exhausted search quota returns an error rather than an empty result; the default country is Indonesia, so foreign numbers need the full +country code.
Sending requests too quickly triggers a captcha (HTTP 403) that you solve with the captcha command, and an exhausted search quota returns an error rather than an empty result; the default country is Indonesia, so foreign numbers need the full +country code.Where are my credentials and search results stored?Credentials live locally at ~/.config/gtc/credentials.json with 600 permissions on POSIX systems, and every lookup is also written to a local results/ folder that's gitignored because it can contain sensitive phone data.
Credentials live locally at ~/.config/gtc/credentials.json with 600 permissions on POSIX systems, and every lookup is also written to a local results/ folder that's gitignored because it can contain sensitive phone data.How does it encrypt communication with GetContact's servers?Each request payload is encrypted with AES-256-ECB using a finalKey obtained from a Diffie-Hellman key exchange during registration, and every request includes an HMAC-SHA256 signature header.
Each request payload is encrypted with AES-256-ECB using a finalKey obtained from a Diffie-Hellman key exchange during registration, and every request includes an HMAC-SHA256 signature header.Can I look up many phone numbers at once?Yes, the batch command reads a CSV of numbers (one per line) and writes a result CSV with columns phone,status,displayName,tagCount,tags,error, skipping failed entries without stopping the run.
Yes, the batch command reads a CSV of numbers (one per line) and writes a result CSV with columns phone,status,displayName,tagCount,tags,error, skipping failed entries without stopping the run.Why was this project built?It's an independent research and learning project created to understand how the GetContact mobile app authenticates and communicates with its backend service.
It's an independent research and learning project created to understand how the GetContact mobile app authenticates and communicates with its backend service.What are similar projects?Photon, flowsint, GhostTrack, phoneinfoga, maigret, social-analyzer, theHarvester, wifit3
Photon, flowsint, GhostTrack, phoneinfoga, maigret, social-analyzer, theHarvester, wifit3Which topics is it in?phone-number, captcha, reconnaissance, whatsapp, csv, osint, cryptography, reverse-engineering, json, encryption, security-tools, command-line-tool
phone-number, captcha, reconnaissance, whatsapp, csv, osint, cryptography, reverse-engineering, json, encryption, security-tools, command-line-tool