Open navigation

Maltego Regex Transforms

Modified on: Wed, 28 Aug, 2024 at 4:46 PM

Overview

Regex Library Transforms helps analysts to extract matching objects from web pages using defined well-known “Regular Expressions” patterns (known as regex).


Investigators can now quickly extract useful information like emails, phone numbers, bitcoin addresses and many more from a web page for free using customizable regex patterns.


Read more about Regex Transforms for Maltego on our website here.


Maltego Regex Transforms: regex-lib Transforms

To Card Numbers [Regex]

Description

Finds card number matches

Transform Settings

Setting NameDisplay NameSetting TypeDefault ValueOptionalPopupAuthentication
maltego.regex-lib.to_card_numbers.patternRegex pattern (Python style)string(?:\d{4}[- ]){3}\d{4}\d{16}TrueTrue

Transform Meta Info

InformationValue
Display NameTo Card Numbers [Regex]
Owner 
AuthorMaltego Technologies
Data SourceRegex
Transform Namemaltego.regex-lib.to_card_numbers
Short DescriptionFinds card number matches
Input Entitiesmaltego.URL
Output Entitiesmaltego.BankCard

To IBAN [Regex]

Description

Finds IBAN matches

Transform Settings

Setting NameDisplay NameSetting TypeDefault ValueOptionalPopupAuthentication
maltego.regex-lib.to_bank_accounts.patternRegex pattern (Python style)string[a-zA-Z]{2}[0-9]{2}[a-zA-Z0-9]{4}[0-9]{7}(?:[a-zA-Z0-9]?){0,16}TrueTrueFalse

Transform Meta Info

InformationValue
Display NameTo IBAN [Regex]
Owner 
AuthorMaltego Technologies
Data SourceRegex
Transform Namemaltego.regex-lib.to_bank_accounts
Short DescriptionFinds IBAN matches
Input Entitiesmaltego.URL
Output Entitiesmaltego.BankAccount

To BTC Addresses [Regex]

Description

Finds BTC address matches

Transform Settings

Setting NameDisplay NameSetting TypeDefault ValueOptionalPopupAuthentication
maltego.regex-lib.to_btc_addresses.patternRegex pattern (Python style)string(?:[13]bc1)[a-zA-HJ-NP-Z0-9]{26,62}TrueTrue

Transform Meta Info

InformationValue
Display NameTo BTC Addresses [Regex]
Owner 
AuthorMaltego Technologies
Data SourceRegex
Transform Namemaltego.regex-lib.to_btc_addresses
Short DescriptionFinds BTC address matches
Input Entitiesmaltego.URL
Output Entitiesmaltego.BTCAddress

To ETH Addresses [Regex]

Description

Finds ETH address matches

Transform Settings

Setting NameDisplay NameSetting TypeDefault ValueOptionalPopupAuthentication
maltego.regex-lib.to_eth_addresses.patternRegex pattern (Python style)string\b0x[a-fA-F0-9]{40}\b | TrueTrueFalse

Transform Meta Info

InformationValue
Display NameTo ETH Addresses [Regex]
Owner 
AuthorMaltego Technologies
Data SourceRegex
Transform Namemaltego.regex-lib.to_eth_addresses
Short DescriptionFinds ETH address matches
Input Entitiesmaltego.URL
Output Entitiesmaltego.ETHAddress

To BTC Transactions [Regex]

Description

Finds BTC transaction matches

Transform Settings

Setting NameDisplay NameSetting TypeDefault ValueOptionalPopupAuthentication
maltego.regex-lib.to_btc_transactions.patternRegex pattern (Python style)string(?:[13]bc1)[a-zA-HJ-NP-Z0-9]{26,62}TrueTrue

Transform Meta Info

InformationValue
Display NameTo BTC Transactions [Regex]
Owner 
AuthorMaltego Technologies
Data SourceRegex
Transform Namemaltego.regex-lib.to_btc_transactions
Short DescriptionFinds BTC transaction matches
Input Entitiesmaltego.URL
Output Entitiesmaltego.BTCTransaction

To ETH Transactions [Regex]

Description

Finds ETH transaction matches

Transform Settings

Setting NameDisplay NameSetting TypeDefault ValueOptionalPopupAuthentication
maltego.regex-lib.to_eth_transactions.patternRegex pattern (Python style)string\b0x(?:[A-Fa-f0-9]{64})\b | TrueTrueFalse

Transform Meta Info

InformationValue
Display NameTo ETH Transactions [Regex]
Owner 
AuthorMaltego Technologies
Data SourceRegex
Transform Namemaltego.regex-lib.to_eth_transactions
Short DescriptionFinds ETH transaction matches
Input Entitiesmaltego.URL
Output Entitiesmaltego.ETHTransaction

To CVEs [Regex]

Description

Finds CVE matches

Transform Settings

Setting NameDisplay NameSetting TypeDefault ValueOptionalPopupAuthentication
maltego.regex-lib.to_cves.patternRegex pattern (Python style)stringCVE-\d{4}-\d* | TrueTrueFalse

Transform Meta Info

InformationValue
Display NameTo CVEs [Regex]
Owner 
AuthorMaltego Technologies
Data SourceRegex
Transform Namemaltego.regex-lib.to_cves
Short DescriptionFinds CVE matches
Input Entitiesmaltego.URL
Output Entitiesmaltego.CVE

To Attack Technique IDs [Regex]

Description

Finds attack technique ID matches

Transform Settings

Setting NameDisplay NameSetting TypeDefault ValueOptionalPopupAuthentication
maltego.regex-lib.to_attack_ids.patternRegex pattern (Python style)stringT\d{4}(?:.\d{3})?TrueTrueFalse

Transform Meta Info

InformationValue
Display NameTo Attack Technique IDs [Regex]
Owner 
AuthorMaltego Technologies
Data SourceRegex
Transform Namemaltego.regex-lib.to_attack_ids
Short DescriptionFinds attack technique ID matches
Input Entitiesmaltego.URL
Output Entitiesmaltego.AttackTechniqueID

To Defanged URLs [Regex]

Description

Finds defanged URL matches

Transform Settings

Setting NameDisplay NameSetting TypeDefault ValueOptionalPopupAuthentication
maltego.regex-lib.to_defanged_urls.patternRegex pattern (Python style)string(?:h..ps?f.p)://(?:www(?:.[.])(?!www))[a-zA-Z0-9][a-zA-Z0-9-]+[a-zA-Z0-9](?:.

Transform Meta Info

InformationValue
Display NameTo Defanged URLs [Regex]
Owner 
AuthorMaltego Technologies
Data SourceRegex
Transform Namemaltego.regex-lib.to_defanged_urls
Short DescriptionFinds defanged URL matches
Input Entitiesmaltego.URL
Output Entitiesmaltego.DefangedURL

To MAC Addresses [Regex]

Description

Finds MAC address matches

Transform Settings

Setting NameDisplay NameSetting TypeDefault ValueOptionalPopupAuthentication
maltego.regex-lib.to_mac_addresses.patternRegex pattern (Python style)string(?:[a-fA-F0-9]{2}[:-]){5}[a-fA-F0-9]{2}TrueTrueFalse

Transform Meta Info

InformationValue
Display NameTo MAC Addresses [Regex]
Owner 
AuthorMaltego Technologies
Data SourceRegex
Transform Namemaltego.regex-lib.to_mac_addresses
Short DescriptionFinds MAC address matches
Input Entitiesmaltego.URL
Output Entitiesmaltego.MacAddress

To IPv4 Addresses [Regex]

Description

Finds IPv4 address matches

Transform Settings

Setting NameDisplay NameSetting TypeDefault ValueOptionalPopupAuthentication
maltego.regex-lib.to_ipv4_addresses.patternRegex pattern (Python style)string(?:25[0-5]2[0-4]\d|[0-1]?\d{1,2})(?:.(?:25[0-5]2[0-4]\d|[0-1]?\d{1,2})){3}True

Transform Meta Info

InformationValue
Display NameTo IPv4 Addresses [Regex]
Owner 
AuthorMaltego Technologies
Data SourceRegex
Transform Namemaltego.regex-lib.to_ipv4_addresses
Short DescriptionFinds IPv4 address matches
Input Entitiesmaltego.URL
Output Entitiesmaltego.IPv4Address

To IPv6 Addresses [Regex]

Description

Finds IPv6 address matches

Transform Settings

Setting NameDisplay NameSetting TypeDefault ValueOptionalPopupAuthentication
maltego.regex-lib.to_ipv6_addresses.patternRegex pattern (Python style)string[0-9a-fA-F]{1,4}(?::[0-9a-fA-F]{1,4}){7}(?:(?:[0-9A-Fa-f]{1,4}(?::[0-9A-Fa-f]{1,4}){0,5})?)::(?:(?:[0-9A-Fa-f]{1,4}(?::[0-9A-Fa-f]{1,4}){0,5})?)TrueTrue

Transform Meta Info

InformationValue
Display NameTo IPv6 Addresses [Regex]
Owner 
AuthorMaltego Technologies
Data SourceRegex
Transform Namemaltego.regex-lib.to_ipv6_addresses
Short DescriptionFinds IPv6 address matches
Input Entitiesmaltego.URL
Output Entitiesmaltego.IPv6Address

To Domains [Regex]

Description

Finds domain matches

Transform Settings

Setting NameDisplay NameSetting TypeDefault ValueOptionalPopupAuthentication
maltego.regex-lib.to_domains.patternRegex pattern (Python style)string(?:a-z0-9?.)+[a-z0-9][a-z0-9-]{0,61}[a-z0-9]TrueTrueFalse

Transform Meta Info

InformationValue
Display NameTo Domains [Regex]
Owner 
AuthorMaltego Technologies
Data SourceRegex
Transform Namemaltego.regex-lib.to_domains
Short DescriptionFinds domain matches
Input Entitiesmaltego.URL
Output Entitiesmaltego.Domain

To URLs [Regex]

Description

Finds URL matches

Transform Settings

Setting NameDisplay NameSetting TypeDefault ValueOptionalPopupAuthentication
maltego.regex-lib.to_urls.patternRegex pattern (Python style)stringhttps?://\S+TrueTrueFalse

Transform Meta Info

InformationValue
Display NameTo URLs [Regex]
Owner 
AuthorMaltego Technologies
Data SourceRegex
Transform Namemaltego.regex-lib.to_urls
Short DescriptionFinds URL matches
Input Entitiesmaltego.URL
Output Entitiesmaltego.URL

To SSNs [Regex]

Description

Finds social security number matches

Transform Settings

Setting NameDisplay NameSetting TypeDefault ValueOptionalPopupAuthentication
maltego.regex-lib.to_ssns.patternRegex pattern (Python style)string(?!6660009\d{2})\d{3}-(?!00)\d{2}-(?!0{4})\d{4}True

Transform Meta Info

InformationValue
Display NameTo SSNs [Regex]
Owner 
AuthorMaltego Technologies
Data SourceRegex
Transform Namemaltego.regex-lib.to_ssns
Short DescriptionFinds social security number matches
Input Entitiesmaltego.URL
Output Entitiesmaltego.SSN

To VINs [Regex]

Description

Finds vehicle identification number matches

Transform Settings

Setting NameDisplay NameSetting TypeDefault ValueOptionalPopupAuthentication
maltego.regex-lib.to_vins.patternRegex pattern (Python style)string[(A-HJ-NPR-Z

Transform Meta Info

InformationValue
Display NameTo VINs [Regex]
Owner 
AuthorMaltego Technologies
Data SourceRegex
Transform Namemaltego.regex-lib.to_vins
Short DescriptionFinds vehicle identification number matches
Input Entitiesmaltego.URL
Output Entitiesmaltego.VinNumber

To Emails [Regex]

Description

Finds email matches

Transform Settings

Setting NameDisplay NameSetting TypeDefault ValueOptionalPopupAuthentication
maltego.regex-lib.to_emails.patternRegex pattern (Python style)string[a-zA-Z0-9!#$%&’*+/=?`{}~^.-]+@[a-zA-Z0-9.-]+.[a-zA-Z]+TrueTrue

Transform Meta Info

InformationValue
Display NameTo Emails [Regex]
Owner 
AuthorMaltego Technologies
Data SourceRegex
Transform Namemaltego.regex-lib.to_emails
Short DescriptionFinds email matches
Input Entitiesmaltego.URL
Output Entitiesmaltego.EmailAddress

To Hashtags [Regex]

Description

Finds hashtag matches

Transform Settings

Setting NameDisplay NameSetting TypeDefault ValueOptionalPopupAuthentication
maltego.regex-lib.to_hashtags.patternRegex pattern (Python style)string#[a-zA-Z0-9]+TrueTrueFalse

Transform Meta Info

InformationValue
Display NameTo Hashtags [Regex]
Owner 
AuthorMaltego Technologies
Data SourceRegex
Transform Namemaltego.regex-lib.to_hashtags
Short DescriptionFinds hashtag matches
Input Entitiesmaltego.URL
Output Entitiesmaltego.hashtag

To Mentions [Regex]

Description

Finds mention matches

Transform Settings

Setting NameDisplay NameSetting TypeDefault ValueOptionalPopupAuthentication
maltego.regex-lib.to_mentions.patternRegex pattern (Python style)string@[a-zA-Z0-9]+TrueTrueFalse

Transform Meta Info

InformationValue
Display NameTo Mentions [Regex]
Owner 
AuthorMaltego Technologies
Data SourceRegex
Transform Namemaltego.regex-lib.to_mentions
Short DescriptionFinds mention matches
Input Entitiesmaltego.URL
Output Entitiesmaltego.Alias

To Hashes [Regex]

Description

Finds hash matches

Transform Settings

Setting NameDisplay NameSetting TypeDefault ValueOptionalPopupAuthentication
maltego.regex-lib.to_hashes.patternRegex pattern (Python style)string[A-Fa-f0-9]{64}[a-fA-F0-9]{40}[a-fA-F0-9]{32}True

Transform Meta Info

InformationValue
Display NameTo Hashes [Regex]
Owner 
AuthorMaltego Technologies
Data SourceRegex
Transform Namemaltego.regex-lib.to_hashes
Short DescriptionFinds hash matches
Input Entitiesmaltego.URL
Output Entitiesmaltego.Hash

To UUID/GUID [Regex]

Description

Finds UUID/GUID matches

Transform Settings

Setting NameDisplay NameSetting TypeDefault ValueOptionalPopupAuthentication
maltego.regex-lib.to_uid.patternRegex pattern (Python style)string(?:[a-fA-F\d]{8})-?(?:[a-fA-F\d]{4})-?(?:[a-fA-F\d]{4})-?(?:[a-fA-F\d]{4})-?(?:[a-fA-F\d]{12})TrueTrueFalse

Transform Meta Info

InformationValue
Display NameTo UUID/GUID [Regex]
Owner 
AuthorMaltego Technologies
Data SourceRegex
Transform Namemaltego.regex-lib.to_uid
Short DescriptionFinds UUID/GUID matches
Input Entitiesmaltego.URL
Output Entitiesmaltego.UniqueIdentifier

Custom regex pattern 1 [Regex]

Description

Define your regex in Transform Inputs

Transform Settings

Setting NameDisplay NameSetting TypeDefault ValueOptionalPopupAuthentication
maltego.regex-lib.custom1.nameRegex namestringNoneTrueTrueFalse
maltego.regex-lib.custom1.patternRegex pattern (Python style)stringNoneTrueTrueFalse

Transform Meta Info

InformationValue
Display NameCustom regex pattern 1 [Regex]
Owner 
AuthorMaltego Technologies
Data SourceRegex
Transform Namemaltego.regex-lib.custom1
Short DescriptionDefine your regex in Transform Inputs
Input Entitiesmaltego.URL
Output Entitiesmaltego.Phrase

Custom regex pattern 2 [Regex]

Description

Define your regex in Transform Inputs

Transform Settings

Setting NameDisplay NameSetting TypeDefault ValueOptionalPopupAuthentication
maltego.regex-lib.custom2.nameRegex namestringNoneTrueTrueFalse
maltego.regex-lib.custom2.patternRegex pattern (Python style)stringNoneTrueTrueFalse

Transform Meta Info

InformationValue
Display NameCustom regex pattern 2 [Regex]
Owner 
AuthorMaltego Technologies
Data SourceRegex
Transform Namemaltego.regex-lib.custom2
Short DescriptionDefine your regex in Transform Inputs
Input Entitiesmaltego.URL
Output Entitiesmaltego.Phrase

Custom regex pattern 3 [Regex]

Description

Define your regex in Transform Inputs

Transform Settings

Setting NameDisplay NameSetting TypeDefault ValueOptionalPopupAuthentication
maltego.regex-lib.custom3.nameRegex namestringNoneTrueTrueFalse
maltego.regex-lib.custom3.patternRegex pattern (Python style)stringNoneTrueTrueFalse

Transform Meta Info

InformationValue
Display NameCustom regex pattern 3 [Regex]
Owner 
AuthorMaltego Technologies
Data SourceRegex
Transform Namemaltego.regex-lib.custom3
Short DescriptionDefine your regex in Transform Inputs
Input Entitiesmaltego.URL
Output Entitiesmaltego.Phrase


Did you find it helpful? Yes No

Send feedback
Sorry we couldn't be helpful. Help us improve this article with your feedback.