Maltego-TRX library is used to rapidly develop Transform in a fast-paced organization. Using inbuilt discovery protocol these Transforms can be seamlessly added to iTDS and then distributed to Maltego Desktop Clients using Seeds in a manageable fashion with the least complexity.
Step 1: Setup Maltego-TRX Server
Setup Maltego-TRX server using any one of the methods given below:
Step 2: Find the Transform URL
Find the URL of each Transform in the following example project structure:
/var/www/TRX ├── project.py └── transforms ├── DNSToIP.py └── GreetPerson.py
Use this command to list all available Transform:
cd /var/www/TRX/ python project.py list
You should receive a similar output:
= Transform Server URLs = /run/dnstoip/: DNSToIP /run/greetperson/: GreetPerson = Local Transform Names = dnstoip: DNSToIP greetperson: GreetPerson
We will be using the DNSToIP transform by copying "/run/dnstoip/" from line 3.
The complete Transform URL then will become:
"10.0.1.2" being server IP or hostname
Step 3: Add iTDS Seed
After setting up the iTDS, create an empty Seed by going to iTDS Admin UI > Seeds > Add Seed
Step 4: Add Transform to iTDS
Add Transform URL by going to iTDS Admin UI > Transforms > Add Transform.
Step 5: Install Seed
Copy Seed and add it to Maltego Desktop Client.
"iTDS Admin UI" > Seeds > "Copy"
Maltego > Transform Hub > Add Transform Seed > Click OK.
Click on Install and then Yes to install the Seed.
Test by dropping a DNSName Entity on to a graph and then right-click > TRX Seed Transforms > TRX DNSToIP to get IPv4Address output Entity.