Malformity is a Maltego project based on the Canari framework for malicious binary and infrastructure research.
Python
Latest commit 2af4472 Jun 11, 2014 @digital4rensics Merge pull request #34 from liorbp/patch-1
Update vicheck_hash2filename.py - Thanks!
Permalink
Failed to load latest commit information.
maltego Update Dec 28, 2012
src/Malformity Update vicheck_hash2filename.py Jun 11, 2014
.canari Config Change Feb 27, 2013
.gitignore update .gitignore Jan 25, 2013
README.md Update README.md Mar 12, 2014
setup.py Upgraded to Canari v1.0 Aug 29, 2013

README.md

Malformity

1.0 Introduction

Malformity is a Maltego project based upon the Canari Framework. Using this framework greatly simplifies the process of installing local transforms in Maltego.

The project directory structure is as follows:

  • src/Malformity directory is where all your stuff goes in terms of auxiliary modules that you may need for your modules
  • src/Malformity/transforms directory is where all your transform modules should be placed.
  • src/Malformity/transforms/common directory is where you can put some common code for your transforms like result parsing, entities, etc.
  • src/Malformity/transforms/common/entities.py is where you define your custom entities.
  • maltego/ is where you can store your Maltego entity exports.

If you're going to add a new transform in the transforms directory, remember to update the __all__ variable in src/Malformity/transforms/__init__.py. Otherwise, canari install-package won't attempt to install the transform. Alternatively, canari create-transform <transform name> can be used within the src/Malformity/transforms directory to generate a transform module and have it automatically added to the __init__.py file.

2.0 Installing Malformity

2.1 - Supported Platforms

Malformity has been tested on Mac OSX. Transforms are written in Python version 2.7.

2.2 - Requirements

In order to make full use of Malformity, the setup script will download additional modules.

If for some reason these fail, requirements are:

  • Canari 0.9
  • Mechanize 0.2.5
  • BeautifulSoup 3.2.1
  • requests 1.2.0

2.3 - Installation

$ sudo python setup.py install

After completing setup, the command below can be used to install Malformity in Maltego.

$ canari install-package Malformity

For Tungsten users:

$ canari create-profile Malformity

This will create a .mtz in the working directory, which can then be imported in to Maltego

3.0 Credits

Special thanks is due to the following people:

  • Nadeem Douba - For creating the Canari framework and offering great support
  • ohdae - For allowing us to include his entity set in Malformity

Contact

@digital4rensics - www.digital4rensics.com - Keith@digital4rensics.com