Initial attack vectors for recon usually involve utilizing pay-for-data/API (Recon-NG), or paying to utilize transforms (Maltego) to get data mining results. Skiptracer utilizes some basic python webscraping (BeautifulSoup) of PII paywall sites to compile passive information on a target on a ramen noodle budget.
$ git clone https://github.com/xillwillx/skiptracer.git skiptracerInstall requirements
$ cd skiptracer
$ pip install -r requirements.txtRun
$ python skiptracer.py -l (phone|email|sn|name|plate)
Full details on how to use Skiptracer are on the wiki located here