Integrate Tomba Finder with Maltego

A comprehensive Maltego integration for Tomba.io using the official Python SDK, providing 11 specialized transforms for email discovery, verification, and enrichment.

Features

Core Email Discovery

• Domain Search: Find all emails associated with a domain

Email Analysis & Verification

• Email Verifier: Verify email deliverability and validity
• Email Enrichment: Enrich emails with professional/personal data

Content & Social Intelligence

• Author Finder: Extract author emails from article URLs
• LinkedIn Finder: Find emails from LinkedIn profiles

Utility Transforms

• Account Info: Check API usage and account status
• Phone Finder: Discover phone numbers associated with emails/domains
• Phone Validator: Validate phone numbers for correctness
• Similar Domains: Find domains related to a given domain
• Technology Checker: Identify technologies used by a website

Prerequisites

• Python 3.8 or later
• Maltego CE/Classic/XL
• Tomba.io API account (Sign up here)

Installation

Clone this repo locally.

Code
 
git clone https://github.com/tomba-io/tomba-maltego.git
cd tomba-maltego
# Install dependencies
pip install -r requirements.txt

Configure API credentials:

Code
 
cp settings.py.template settings.py
# Edit settings.py with your Tomba.io API keys

Open Maltego and using Import Config, import the tomba_transforms.mtz file from the repository

API Configuration

Get your API credentials from Tomba.io API Dashboard:

Code
 
# In settings.py
TOMBA_API_KEY = "ta_xxxxxxxxxxxxxxxxxxxx"      # Your API Key
TOMBA_SECRET_KEY = "ts_xxxxxxxxxxxxxxxxxxxx"   # Your Secret Key

Transform Reference

Usage Examples

Basic Domain Search

1. Add Website entity: example.com
2. Run Domain Search [Tomba]
3. Explore discovered emails and people

Email Verification

1. Add Email entity: user@domain.com
2. Run Email Verifier [Tomba]
3. Check verification status and deliverability

Configuration Options

Common Issues

• "Please configure API credentials"**

• Add API keys in Transform Hub → Server Settings
• Verify credentials in Tomba.io dashboard

"Rate limit exceeded"

• Wait before making more requests
• Upgrade Tomba.io plan for higher limits

"No results found"

• Try different domains/emails
• Check if data exists publicly
• Verify domain has discoverable emails

Security & Privacy

• API keys are never logged or exposed
• All requests use HTTPS
• Input validation prevents injection attacks
• Respects rate limits and terms of service
• GDPR and privacy-compliant data handling

Support

• Issues: Create an issue on GitHub
• Support: Tomba.io Support
• Maltego Help: Maltego Documentation

Acknowledgments

• Maltego for the Maltego platform
• maltego-trx maltego-trx library