FetLife Maltego is a package of PHP-based Local Transforms for the Maltego OSINT and forensics data mining tool that act on FetLife.com.
See the project wiki (included in the docs
directory of this package) for an overview of transforms that are available for FetLife.
This tool requires PHP version 5.3 or greater, with PHP's CURL extension installed. It has been tested with Maltego 3.4.1 and greater. Additionally, this tool requires two libraries:
We'll get these in the next step.
This section documents how to install and use FetLife Maltego.
git clone git://github.com/meitar/fetlife-maltego.git # Clone this code.
cd fetlife-maltego
git submodule init # Install the libraries,
git submodule update # and then fetch them.
cp fl-mt-config.ini.php-sample fl-mt-config.ini.php # Create the config file.
vi fl-mt-config.ini.php # Edit the config file.
Then, in Maltego:
fetlife-maltego.mtz
, provided with this package.Before you can use the FetLife Maltego local transforms, you have to tell it which FetLife account you want to use. If you don't already have a login for FetLife, you can use the Tor Browser to access FetLife.com anonymously and create one. By default, FetLife Maltego is already configured to auto-select a proxy server with which to contact FetLife.
FetLife Maltego looks for a configuration file named fl-mt-config.ini.php
in the same directory as its main workhorse script, FetLifeTransform.php
. The program ships with a sample configuration file called fl-mt-config.ini.php-sample
. Rename or copy the sample file to the expected name, then enter your preferred settings.
The configuration file uses PHP's ini
file syntax. Edit the config file in your favorite text editor and set values for the FetLife username, password, and optionally a proxy server you'll use to query FetLife.com.
All transforms can be run from the FetLifeTransform.php
script. To choose a transform, use the -t
short option or the equivalent --transform
long option. For instance, to run the friends
transform against the FetLife user JohnBaku
, use:
/usr/bin/php /path/to/FetLifeTransform.php --transform friends JohnBaku
Alternatively, invoke the fetlifetransform-friends.php
script as follows for the same effect:
/usr/bin/php /path/to/fetlifetransform-friends.php JohnBaku
This may take a little while if a user has a lot of "friends." :P
To run FetLife Maltego's transformations in your Maltego client, you first need to add them to your list of available transforms. Follow Paterva's instructions for Adding a new transform. When adding a new transform in the Local Transform Wizard, be mindful of the following settings:
Input entity type
field, choose the entity you'd like to subject to a transform. FetLife Maltego currently has transforms for the following input entity types:
/usr/bin/php
fetlifetransform-TRANSFORM_NAME.php
, where TRANSFORM_NAME is the transform you want to invoke./path/to/fetlife-maltego
If you have problems, try the following steps before submitting a bug.
lib/FetLife
directory and its fl_sessions
directory is read and writable by your user.