├── .gitattributes ├── .gitmodules └── README.md /.gitattributes: -------------------------------------------------------------------------------- 1 | # Auto detect text files and perform LF normalization 2 | * text=auto 3 | -------------------------------------------------------------------------------- /.gitmodules: -------------------------------------------------------------------------------- 1 | [submodule "Maltego-Rapleaf"] 2 | path = Maltego-Rapleaf 3 | url = https://github.com/cmlh/Maltego-Rapleaf.git 4 | [submodule "Maltego-Facebook"] 5 | path = Maltego-Facebook 6 | url = https://github.com/cmlh/Maltego-Facebook.git 7 | [submodule "ThreatButt"] 8 | path = ThreatButt 9 | url = https://github.com/ivanlei/threatbutt.git 10 | [submodule "Golang-Example"] 11 | path = Golang-Example 12 | url = https://github.com/NoobieDog/maltegolocal.git 13 | [submodule "PythonTransformExample"] 14 | path = PythonTransformExample 15 | url = https://github.com/cmlh/MaltegoTransform-Python.git 16 | [submodule "PyMaltegoTransform"] 17 | path = PyMaltegoTransform 18 | url = https://github.com/bindlock/pymaltego.git 19 | [submodule "PaloAltoMaltegoCanariFramework"] 20 | path = PaloAltoMaltegoCanariFramework 21 | url = https://github.com/bostonlink/pamalt_canari.git 22 | [submodule "GoldFish"] 23 | path = GoldFish 24 | url = https://github.com/brianwarehime/goldphish.git 25 | [submodule "HackerTargetAPI"] 26 | path = HackerTargetAPI 27 | url = https://github.com/peter-hackertarget/maltego_transforms.git 28 | [submodule "MaltegoTraining"] 29 | path = MaltegoTraining 30 | url = https://github.com/nenaiko-dareda/maltego_training.git 31 | [submodule "ThreatNote"] 32 | path = ThreatNote 33 | url = https://github.com/brianwarehime/Threat_note-Maltego.git 34 | [submodule "TwitterPerl"] 35 | path = TwitterPerl 36 | url = https://github.com/cmlh/Maltego-Twitter.git 37 | [submodule "FireAMP"] 38 | path = FireAMP 39 | url = https://github.com/JC-SoCal/FireAMP-Maltego.git 40 | [submodule "SpiderMal"] 41 | path = SpiderMal 42 | url = https://github.com/pan-unit42/public_tools.git 43 | [submodule "WayBack"] 44 | path = WayBack 45 | url = https://github.com/brianwarehime/wayback-maltego.git 46 | [submodule "Munk"] 47 | path = Munk 48 | url = https://github.com/brianwarehime/munk.git 49 | [submodule "MaltegoCRITs"] 50 | path = MaltegoCRITs 51 | url = https://github.com/brianwarehime/mcrits.git 52 | [submodule "WebPulse"] 53 | path = WebPulse 54 | url = https://github.com/tampererer/WebPulse-Maltego.git 55 | [submodule "MacAfeeDomainReputation"] 56 | path = MacAfeeDomainReputation 57 | url = https://github.com/tampererer/IP-Domain-Reputation-Maltego.git 58 | [submodule "Mnemonic"] 59 | path = Mnemonic 60 | url = https://github.com/tampererer/mnemonic-Maltego.git 61 | [submodule "HybridAnalysis"] 62 | path = HybridAnalysis 63 | url = https://github.com/tampererer/HybridAnalysis-Public-API-Maltego.git 64 | [submodule "VirusTotal"] 65 | path = VirusTotal 66 | url = https://github.com/tampererer/VirusTotal-Public-API-Maltego.git 67 | [submodule "OpenCorporates"] 68 | path = OpenCorporates 69 | url = https://github.com/clening/opencorporates_maltego_transform.git 70 | [submodule "PDNS"] 71 | path = PDNS 72 | url = https://github.com/ebouillon/PDNS-Maltego.git 73 | [submodule "RiskIQ"] 74 | path = RiskIQ 75 | url = https://github.com/RiskIQ/malriq.git 76 | [submodule "PSSL"] 77 | path = PSSL 78 | url = https://github.com/ebouillon/PSSL-Maltego.git 79 | [submodule "PTES"] 80 | path = PTES 81 | url = https://github.com/ausarneteru/EternalPtesTransforms.git 82 | [submodule "MISP"] 83 | path = MISP 84 | url = https://github.com/ebouillon/MISP-Maltego.git 85 | [submodule "Send2URL"] 86 | path = Send2URL 87 | url = https://github.com/reenberg/maltego-send2url.git 88 | [submodule "WhoIsStory"] 89 | path = WhoIsStory 90 | url = https://github.com/whoistory/whoistory.git 91 | [submodule "AsynchronousMaltego"] 92 | path = AsynchronousMaltego 93 | url = https://github.com/glennzw/maltaSync.git 94 | [submodule "BitcoinExplorer"] 95 | path = BitcoinExplorer 96 | url = https://github.com/5haman/maltego-btc.git 97 | [submodule "MISPego"] 98 | path = MISPego 99 | url = https://github.com/tomking2/MISPego.git 100 | [submodule "NMap"] 101 | path = NMap 102 | url = https://github.com/shizzz477/Maltego-Nmap-Transforms.git 103 | [submodule "FreeGeoIP"] 104 | path = FreeGeoIP 105 | url = https://github.com/sroberts/transforms.git 106 | [submodule "DotNet"] 107 | path = DotNet 108 | url = https://github.com/RDMcMahon/MaltegoTransformNet.git 109 | [submodule "Utils"] 110 | path = Utils 111 | url = https://github.com/Foo-Manroot/Maltego-utils.git 112 | [submodule "AWSRemoteTransform"] 113 | path = AWSRemoteTransform 114 | url = https://github.com/catalyst256/aws-maltegotransforms.git 115 | [submodule "ReverseWhoIs"] 116 | path = ReverseWhoIs 117 | url = https://github.com/tampererer/ReverseWhois-Maltego.git 118 | [submodule "Maltongo"] 119 | path = Maltongo 120 | url = https://github.com/mattnewham/maltongo.git 121 | [submodule "Blockade"] 122 | path = Blockade 123 | url = https://github.com/blockadeio/maltego_transforms.git 124 | [submodule "MetaSearch"] 125 | path = MetaSearch 126 | url = https://github.com/catalyst256/maltego-metasearch.git 127 | [submodule "Racoon_Recon-NG"] 128 | path = Racoon_Recon-NG 129 | url = https://github.com/SneakersInc/Racoon.git 130 | [submodule "Pandora"] 131 | path = Pandora 132 | url = https://github.com/SneakersInc/Pandora.git 133 | [submodule "HoneyMalt"] 134 | path = HoneyMalt 135 | url = https://github.com/SneakersInc/HoneyMalt.git 136 | [submodule "MiscreantPuncher"] 137 | path = MiscreantPuncher 138 | url = https://github.com/carterb/maltego.git 139 | [submodule "ThreatCentral"] 140 | path = ThreatCentral 141 | url = https://github.com/ThreatCentral/blackberries.git 142 | [submodule "Splunk"] 143 | path = Splunk 144 | url = https://github.com/eatm-cert/maltego.git 145 | [submodule "MaliciousDomainProfiling"] 146 | path = MaliciousDomainProfiling 147 | url = https://github.com/cmlh/Maltego-Transforms-Mirror.git 148 | [submodule "GotFlow"] 149 | path = GotFlow 150 | url = https://github.com/cmlh/gotFlow.git 151 | [submodule "AirBag"] 152 | path = AirBag 153 | url = https://github.com/brianwarehime/airbag.git 154 | [submodule "CryptoPerl"] 155 | path = CryptoPerl 156 | url = https://github.com/cmlh/Maltego-Crypto.git 157 | [submodule "BlueCoat"] 158 | path = BlueCoat 159 | url = https://github.com/rwhalen/MaltegoTransforms.git 160 | [submodule "BreachAlarm"] 161 | path = BreachAlarm 162 | url = https://github.com/cmlh/Maltego-BreachAlarm.git 163 | [submodule "Steam"] 164 | path = Steam 165 | url = https://github.com/WlndyMiller/SteamTransforms.git 166 | [submodule "TwitterMachine"] 167 | path = TwitterMachine 168 | url = https://github.com/BuckyBilson/MaltegoTransforms.git 169 | [submodule "NMapIP"] 170 | path = NMapIP 171 | url = https://github.com/herebepanda/maltego-transforms.git 172 | [submodule "GoogleServices"] 173 | path = GoogleServices 174 | url = https://github.com/nullJaX/Maltego-Google-Transforms.git 175 | [submodule "Facebook"] 176 | path = Facebook 177 | url = https://github.com/leresearcher/Maltego-Socialmedia-Transform.git 178 | [submodule "DomainTools"] 179 | path = DomainTools 180 | url = https://github.com/leresearcher/Maltego---Domaintools.git 181 | [submodule "PhoneValidate"] 182 | path = PhoneValidate 183 | url = https://github.com/monkeywire/PhoneValidate.git 184 | [submodule "DockeriTDSServer"] 185 | path = DockeriTDSServer 186 | url = https://github.com/asealey/maltego-tds-docker.git 187 | [submodule "Fetlife"] 188 | path = Fetlife 189 | url = https://github.com/meitar/fetlife-maltego.git 190 | [submodule "BlockChainExplorer"] 191 | path = BlockChainExplorer 192 | url = https://github.com/bostonlink/bitcoin-explorer.git 193 | [submodule "TruePeopleSearch"] 194 | path = TruePeopleSearch 195 | url = https://github.com/brianwarehime/truepeoplesearch_transforms.git 196 | [submodule "HeartBleed"] 197 | path = HeartBleed 198 | url = https://github.com/DisK0nn3cT/MaltegoHeartbleed.git 199 | [submodule "CreateTransform"] 200 | path = CreateTransform 201 | url = https://github.com/catalyst256/MyFirstTransform.git 202 | [submodule "Censys"] 203 | path = Censys 204 | url = https://github.com/ebouillon/Censys-Maltego.git 205 | [submodule "MaltegoCloud"] 206 | path = MaltegoCloud 207 | url = https://github.com/therm000/maltego-cloud.git 208 | [submodule "CRT"] 209 | path = CRT 210 | url = https://github.com/brianwarehime/crt.sh-Maltego-Transforms.git 211 | [submodule "OpenDNS"] 212 | path = OpenDNS 213 | url = https://github.com/anthonykasza/opendns_transform.git 214 | [submodule "VirusTotal2"] 215 | path = VirusTotal2 216 | url = https://github.com/michael-yip/MaltegoVT.git 217 | [submodule "NessusParser"] 218 | path = NessusParser 219 | url = https://github.com/securifera/MaltegoNessusParser.git 220 | [submodule "Nextego"] 221 | path = Nextego 222 | url = https://github.com/bostonlink/Nextego.git 223 | [submodule "RecordedFuture"] 224 | path = RecordedFuture 225 | url = https://github.com/cmlh/Maltego-Recorded_Future.git 226 | [submodule "RecordedFutureTDS"] 227 | path = RecordedFutureTDS 228 | url = https://github.com/cmlh/Maltego-Recorded_Future-TDS.git 229 | [submodule "PassiveTotal"] 230 | path = PassiveTotal 231 | url = https://github.com/passivetotal/maltego_tds_transforms.git 232 | [submodule "PassiveTotalMachine"] 233 | path = PassiveTotalMachine 234 | url = https://github.com/passivetotal/maltego_machines.git 235 | [submodule "TwitterFollowerPHP"] 236 | path = TwitterFollowerPHP 237 | url = https://github.com/sonologic/Maltego-transforms.git 238 | [submodule "GavelCAR"] 239 | path = GavelCAR 240 | url = https://github.com/brianwarehime/gavel.git 241 | [submodule "CensysIO"] 242 | path = CensysIO 243 | url = https://github.com/mpars0ns/maltego_censys.git 244 | [submodule "Klout"] 245 | path = Klout 246 | url = https://github.com/cmlh/maltego-1.git 247 | [submodule "ThreatCrowd"] 248 | path = ThreatCrowd 249 | url = https://github.com/AlienVault-OTX/ThreatCrowd-Maltego.git 250 | [submodule "ReconNG"] 251 | path = ReconNG 252 | url = https://github.com/bostonlink/recon-ng-maltego.git 253 | [submodule "Skype"] 254 | path = Skype 255 | url = https://github.com/NoobieDog/Skype-Maltego-Client.git 256 | [submodule "Tutorial"] 257 | path = Tutorial 258 | url = https://github.com/jacobjanco/maltego-project.git 259 | [submodule "CuckooForCanari"] 260 | path = CuckooForCanari 261 | url = https://github.com/bostonlink/cuckooforcanari.git 262 | [submodule "WhereismyIp"] 263 | path = WhereismyIp 264 | url = https://github.com/shaddygarg/maltego-transforms.git 265 | [submodule "iSight_Packetmail_TorExitLookUp"] 266 | path = iSight_Packetmail_TorExitLookUp 267 | url = https://github.com/0xd34db33f/maltego-transforms.git 268 | [submodule "Tacyt"] 269 | path = Tacyt 270 | url = https://github.com/ElevenPaths/tacyt-maltego-transforms.git 271 | [submodule "Sploitego"] 272 | path = Sploitego 273 | url = https://github.com/allfro/sploitego.git 274 | [submodule "CanariFramework3"] 275 | path = CanariFramework3 276 | url = https://github.com/redcanari/canari3.git 277 | [submodule "MSploitego"] 278 | path = MSploitego 279 | url = https://github.com/shizzz477/msploitego.git 280 | [submodule "TransNetFramework"] 281 | path = TransNetFramework 282 | url = https://github.com/secana/TransNet.git 283 | [submodule "Amass"] 284 | path = Amass 285 | url = https://github.com/OWASP/Amass.git 286 | [submodule "FileCase"] 287 | path = FileCase 288 | url = https://github.com/deadbits/Analyst-CaseFile.git 289 | [submodule "HaveIBeenPwned"] 290 | path = HaveIBeenPwned 291 | url = https://github.com/cmlh/Maltego-haveibeenpwned.git 292 | [submodule "ElasticElephant"] 293 | path = ElasticElephant 294 | url = https://github.com/znb/Elastic-Elephant.git 295 | [submodule "DarkNetOSINTTransform"] 296 | path = DarkNetOSINTTransform 297 | url = https://github.com/pielco11/DOT.git 298 | [submodule "SpyOnWebAPI"] 299 | path = SpyOnWebAPI 300 | url = https://github.com/krmaxwell/spyonweb.git 301 | [submodule "TRX"] 302 | path = TRX 303 | url = https://github.com/krmaxwell/TRX.git 304 | [submodule "Abusix"] 305 | path = Abusix 306 | url = https://github.com/cmlh/Maltego-Abusix.git 307 | [submodule "FullContact"] 308 | path = FullContact 309 | url = https://github.com/cmlh/Maltego-FullContact.git 310 | [submodule "MaltegoPython3"] 311 | path = MaltegoPython3 312 | url = https://github.com/rousselm4/MaltegoPython3.git 313 | [submodule "Shodan"] 314 | path = Shodan 315 | url = https://github.com/znb/Maltego.git 316 | -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- 1 | # Maltego resources 2 | 3 | Open for contributions 4 | 5 | [Paterva Maltego tutorials - the complete and official set](https://www.youtube.com/playlist?list=PLC9DB3E7C258CD215) 6 | 7 | 8 | ### Updated on 16.08.2018 9 | 10 | AWSRemoteTransform @ b24bb53 11 | 12 | Abusix @ ea1fbf4 13 | 14 | AirBag @ eabdcb9 15 | 16 | Amass @ 39a431b 17 | 18 | AsynchronousMaltego @ 2f7d44e 19 | 20 | BitcoinExplorer @ fdda70b 21 | 22 | BlockChainExplorer @ 69666d6 23 | 24 | Blockade @ 06dd321 25 | 26 | BlueCoat @ b56933e 27 | 28 | BreachAlarm @ 18fbf59 29 | 30 | CRT @ 163fa1f 31 | 32 | CanariFramework3 @ bcf780f 33 | 34 | Censys @ c556e0b 35 | 36 | CensysIO @ da9b037 37 | 38 | CreateTransform @ 4650a6c 39 | 40 | CryptoPerl @ 04442ed 41 | 42 | CuckooForCanari @ 0ae8a04 43 | 44 | DarkNetOSINTTransform @ ee8a947 45 | 46 | DockeriTDSServer @ 209e87b 47 | 48 | DomainTools @ 5dabb30 49 | 50 | DotNet @ d0cec9b 51 | 52 | ElasticElephant @ 51df262 53 | 54 | Facebook @ 33aad6d 55 | 56 | Fetlife @ 78d73df 57 | 58 | FileCase @ 7284f85 59 | 60 | FireAMP @ 0e9b0d7 61 | 62 | FreeGeoIP @ 5e1c401 63 | 64 | FullContact @ 4d3df73 65 | 66 | GavelCAR @ f71e9e5 67 | 68 | Golang-Example @ fb0f37c 69 | 70 | GoldFish @ d4510f9 71 | 72 | GoogleServices @ 9624d7e 73 | 74 | GotFlow @ 2840acc 75 | 76 | HackerTargetAPI @ f12729c 77 | 78 | HaveIBeenPwned @ e7b02fc 79 | 80 | HeartBleed @ 9482751 81 | 82 | HoneyMalt @ 017e1f9 83 | 84 | HybridAnalysis @ 1206fcf 85 | 86 | Klout @ 1dc3483 87 | 88 | MISP @ 1242281 89 | 90 | MISPego @ e3bab8a 91 | 92 | MSploitego @ e5f16e9 93 | 94 | MacAfeeDomainReputation @ 1011c66 95 | 96 | MaliciousDomainProfiling @ 9d6f99d 97 | 98 | Maltego-Facebook @ 7d42790 99 | 100 | Maltego-Rapleaf @ 64de0a9 101 | 102 | MaltegoCRITs @ 7a31d56 103 | 104 | MaltegoCloud @ cf2d272 105 | 106 | MaltegoPython3 @ 7636370 107 | 108 | MaltegoTraining @ 489047c 109 | 110 | Maltongo @ 1c72043 111 | 112 | MetaSearch @ f4150df 113 | 114 | MiscreantPuncher @ b0bbf0f 115 | 116 | Mnemonic @ 4bf6db9 117 | 118 | Munk @ e846914 119 | 120 | NMap @ 0603660 121 | 122 | NMapIP @ 100058a 123 | 124 | NessusParser @ 9c4f474 125 | 126 | Nextego @ 3ae01a6 127 | 128 | OpenCorporates @ 3e9d4bb 129 | 130 | OpenDNS @ 60ee8d0 131 | 132 | PDNS @ e669195 133 | 134 | PSSL @ d1df536 135 | 136 | PTES @ b9dd50e 137 | 138 | PaloAltoMaltegoCanariFramework @ cce1af2 139 | 140 | Pandora @ b09528f 141 | 142 | PassiveTotal @ f35244f 143 | 144 | PassiveTotalMachine @ 569b894 145 | 146 | PhoneValidate @ 2733ba6 147 | 148 | PyMaltegoTransform @ 1513ba7 149 | 150 | PythonTransformExample @ ff1f601 151 | 152 | Racoon_Recon-NG @ 474eaf6 153 | 154 | ReconNG @ 82f5d96 155 | 156 | RecordedFuture @ 073fb52 157 | 158 | RecordedFutureTDS @ 77792e2 159 | 160 | ReverseWhoIs @ da1f676 161 | 162 | RiskIQ @ 6c7a8f6 163 | 164 | Send2URL @ 333f2f6 165 | 166 | Shodan @ 0230194 167 | 168 | Skype @ f3634d0 169 | 170 | SpiderMal @ afe2a74 171 | 172 | Sploitego @ d9568dc 173 | 174 | Splunk @ b1a9c1b 175 | 176 | SpyOnWebAPI @ 2fb2e92 177 | 178 | Steam @ 8dfe136 179 | 180 | TRX @ fc0f093 181 | 182 | Tacyt @ 08f3256 183 | 184 | ThreatButt @ faff507 185 | 186 | ThreatCentral @ d0ede69 187 | 188 | ThreatCrowd @ 8181e4f 189 | 190 | ThreatNote @ 93b1f21 191 | 192 | TransNetFramework @ 53e408e 193 | 194 | TruePeopleSearch @ fc1bd73 195 | 196 | Tutorial @ 2f4ad38 197 | 198 | TwitterFollowerPHP @ fb7fd5f 199 | 200 | TwitterMachine @ d03fd0d 201 | 202 | TwitterPerl @ e14b437 203 | 204 | Utils @ c8ecc50 205 | 206 | VirusTotal @ c4de4b1 207 | 208 | VirusTotal2 @ 9ea9cbe 209 | 210 | WayBack @ 8b0814f 211 | 212 | WebPulse @ 15e8f4c 213 | 214 | WhereismyIp @ 2928866 215 | 216 | WhoIsStory @ a325cd2 217 | 218 | iSight_Packetmail_TorExitLookUp @ 833d1b1 219 | 220 | ## TODO 221 | 222 | add author, description, category, scope and status (Active/Deprecated) for each repo 223 | --------------------------------------------------------------------------------