How To Find Out Someone's Hotel Room Number

Finding someones hotel room number with a telephone phone call.

While in at a hotel in Abu Dhabi (which I won't be naming) I noticed something rather foreign that I haven't seen in other hotels. It was the phone arrangement (as some of you know, I rather like telephone systems) This i immune me to find out the name and room number of the people staying there without talking to anyone.

First, I had to take access to a phone on the hotel's telephone network. This can be accomplished a number of different means — from calling in the lobby, or side by side to the elevators, or fifty-fifty inside your ain room. Afterward you have establish a phone, the next steps are fifty-fifty easier. Luckily, my friend Justin gave me permission to notice his room number. While nosotros were in the elevator, I pressed flooring 12 and he selected floor 21. I told him that I now knew his floor, and can easily effigy out his room number. He asked me how, and I told him I would telephone call him subsequently to let him know.

8-XXXX

The dialing program for inside the hotel is 8, followed past the room number.

When you placed the call information technology would evidence you the proper noun of who you are calling equally you can run across with the above prototype. So I called all the numbers viii–2100, 8–2101, 8–2102, 8–2103… viii–2111. Then my friend'due south name came upwardly: Justin Justin Mr. (They had incorrectly entered his name.)

This took me seconds (as you lot can see the time 5:39PM didn't change) since equally soon as the telephone started the call to ring the other room, the name of the person y'all are calling would come. Your proper name will besides come upward on their telephone and information technology would band at least one time. I tried this a few times (to hang up as fast as possible) but was unable to get the other person's telephone non to ring. Now allow'due south take a look at room 2108, which might not be valid room number. In that example the call wouldn't get through, so you can move on to the next number even faster. If y'all want to learn more than most this phone, take a look at this tutorial. It gives a good overview of the capabilities of the phone.

Other notes:

Information technology should be noted that if two people are staying in a room, the one that has their name first volition be listed. Justin Justin had a second person in their room, and I could not find their name using this method.

I was also able to see the history of phone calls from the previous guest. Additionally, I think that the hotel maids might be using the phones to gear up the status of the room (IE clean or ready to be inspected) I can do a write upwardly on that if there's interest.

Allow's talk nigh what I didn't do. I did not attempt emulating an Avaya phone on my estimator to war dial the hotel and make a directory of the people staying at the hotel. I did not try going through the contacts push. I also didn't check to see if the default countersign for the phone was its extension.

So what is going on with this set on? It is basic hand scanning (like war dialing but without a computer) The phone organisation is doing all the work for you. I could have probably fabricated a directory with first and last names and room numbers in an hour or less. This is a phreaking technique that is very rarely used today but, every bit you lot can see, information technology is notwithstanding a valid set on.

Ane of the means to preclude this attack is to cheque into a hotel room under someone else's name or use a imitation name. This was talked about on The Privacy, Security, & OSINT Prove — Episode 101. I should note I accept not tried what he presents below:

"I stayed in Germany, and stayed in several hotels. All of which asked for my passport. I told them all that I lost my passport and had an date with the consulate to get some other. I was never challenged, every hotel just requested another ID. I presented my gym ID, and was accepted without additional challenge each time."

Also if y'all are going to be staying at a hotel and are wondering if this could happen to you, I recommend using OSINT to see what kinda phones they have. You can use the photos people accept taken to run into what kind of phone they accept inside the room earlier you check in.

Equally you can see, the photos of the phone aren't ever the greatest then you lot might have to check a few sites or go through a lot of images. Personally I like using google review photos for this. This image shows that it is an older phone so the higher up information wouldn't piece of work.

TL:DR Dial telephone numbers from hotel room phone until the person'south name comes up that you are looking for.