Install the Geckodriver for your operating system and make sure it’s in your path, on Mac you and place it in /usr/local/bin and on Linux /usr/bin. You can down load it here:
Install the required python 2.7 libaries:
git clone https://github.com/SpiderLabs/social_mapper
pip install -r requirements.txt
Provide Social Mapper with^( to log into social media services:
Open social_mapper.py and enter social media credentials into global variables at the top of the file
Using Social Mapper
Social Mapper is run from the ^( using a mix of required and optional parameters. You can specify options such as input type and which sites to check alongside a number of other parameters which affect speed and accuracy.
To start up the tool 4 parameters must be provided, an input format, the input file or folder and the basic running mode:
-f, --format : Specify if the -i, --input is a 'name', 'csv', 'imagefolder' or 'socialmapper' resume file
-i, --input : The company name, a csv file, imagefolder or social mapper html file to feed into social mapper
-m, --mode : Fast or Accurate allows you to choose to skip potential targets after a first likely match is found, in some cases potentially speeding up the program x20
Additionally at least one social media site to check must be selected by including one or more of the following:
-a, --all : Selects all of the options below and checks every site that social mapper has credentials for
-fb, --facebook : Check Facebook
-tw, --twitter : Check Twitter
-ig, --instagram : Check Instagram
-li, --linkedin : Check LinkedIn
-gp, --googleplus : Check GooglePlus
-vk, --vkontakte : Check VKontakte
-wb, --weibo : Check Weibo
-db, --douban : Check Douban
Additional optional parameters can also be set to add additional customisation to the way social mapper runs:
-t, --threshold : Customises the faceial recognition threshold for matches, this can be seen as the match accuracy. Default is 'standard', but can be set to loose, standard, strict or superstrict. For example loose will find more matches, but some may be incorrect. While strict may find less matches but also contain less false positives in the final report.
-cid, --companyid : Additional parameter to add in a LinkedIn Company ID for if name searches are not picking the correct company.
-s, --showbrowser : Makes the Firefox browser visable so you can see the searches performed. Useful for debugging.
-v, --version : Display current version
Here are a couple of example runs to get started for differing use cases:
A quick run for facebook and twitter on some targets you have in an imagefolder, that you plan to manually review and don't mind some false positives:
python social_mapper.py -f imagefolder -i ./mytargets -m fast -fb -tw
A exhaustive run on a large company where false positives must be kept to a minimum:
python social_mapper.py -f company -i "SpiderLabs" -m accurate -a -t strict
A large run that needs to be split over multiple sessions due to time, the first run doing LinkedIn and Facebook, with the second resuming and filling in Twitter, Google Plus and Instagram:
python social_mapper.py -f company -i "SpiderLabs" -m accurate -li -fb
python social_mapper.py -f socialmapper -i ./SpiderLabs-social-mapper-linkedin-facebook.html -m accurate -tw -gp -ig
Social Media sites often change their page formats and class names, if Social Mapper isn’t working for you on a specific site, check out the docs section for troubleshooting advice on how to fix it. Please feel free to submit a pull request with your fixes.
For a guide to loading your Social Mapper results into Maltego, check out the docs section.
- Jacob Wilkin – Research and Development – ^(