HunxByts/GhostTrack

GhostTrack is a small Python menu wrapper around three common open-source-intelligence lookups. It is worth a look if you already understand what IP geolocation and username enumeration can and cannot tell you; it is not a way to locate a phone or a person.

The problem

An investigator, pentester doing recon, or curious hobbyist has a target identifier — an IP address, a phone number, or a username — and wants a starting dossier fast. Doing this by hand means hopping between geolocation APIs, phone metadata sites and dozens of social platforms. GhostTrack replaces that tab-hopping with a terminal menu: pick IP Tracker, Phone Tracker or Username Tracker, enter the identifier, and get a consolidated screen of results. The visible workflow change is consolidation, not new data sources.

What's different

The project's value is in the packaging, not any novel technique. The README presents three menu entries and documents them mainly through screenshots (project README, IP menu, phone menu, username menu). The IP module is explicitly meant to be combined with Seeker, a separate tool the README links to for obtaining a target IP (Seeker); that means GhostTrack itself supplies the lookup, not the capture. The phone and username modules are described only as searching for information from the target number or username, with no detail on which sources are queried or how results are filtered.

That thinness cuts both ways. The upside is a low-friction entry point for people learning OSINT enumeration. The trade-off is opacity: when a lookup is wrong or returns nothing, the user has little documented basis for judging whether the source failed, the identifier is stale, or the tool was never designed for that case. Phone-number lookups in particular are often misread — a number's registered region or carrier is not a live location.

Who should try it

This fits a learner or junior pentester who wants a quick consolidation of public identifier lookups during authorized reconnaissance, and who will treat the output as leads to verify rather than conclusions. It also fits CTF-style practice where speed matters more than provenance.

It is a poor fit for anyone who needs audited evidence, reproducible sourcing, or locational certainty — for example a case where findings may be challenged. Anyone expecting to track a person's live position from a phone number should look elsewhere, because nothing documented here supports that. The README offers two setup paths, Linux via apt and Termux via pkg, so Android users can run it without a desktop.

Requirements and limitations

You need Python 3, Git, and the packages in the project's requirements file; installation is a clone, a pip install and running the entry script (project instructions). The README documents Linux and Termux only, so Windows and macOS users have no official path here.

The more important limits are legal and interpretive. The README frames the tool as OSINT and information gathering, and the repository carries no declared license (repository), so redistribution and commercial use have no stated terms. Ongoing upkeep is unclear too: lookups depend on external services and social platforms whose pages and rate limits change, and the README does not explain how modules are maintained. Expect to verify results independently and to re-check whether each module still returns meaningful data.

HotRepo's take

HotRepo recorded GhostTrack at #18 on the Python monthly board with +4,926 stars for the month on 2026-10-25 — a single dated snapshot (monthly observation). No daily-board history has been stored, so whether that interest persists cannot be judged from the available evidence. Given the age of the repository and the sparse README, the specific thing to verify before relying on it is which data source each module queries and whether that source still works for your identifiers.