Before we dive in, a quick reality check: Free OSINT tools work by scraping: Carrier data: Which company owns the number? Geographic registration: Where was the number issued?
Kali Linux does include any functional SS7 tools out of the box. find location by phone number kali linux free
When a phone searches for a known WiFi network (e.g., "Starbucks WiFi"), it broadcasts the phone's MAC address. If you know the target's MAC address (obtained via previous interaction or ARP spoofing on a shared network), you can track their physical movement. Before we dive in, a quick reality check: