maltego-crits

[asaf]

hi all,

i'm running crits and maltego on ubuntu 14 lts (4-master).

when i try to view my TLO using maltego i get an error: 

"no such file or directory" (i attached the error message).

1. i checked enable api

2. i added services directory: /data/crits_services (in this directory are all my services including mcrits directory)

3. i added instance url: https://127.0.0.1

4. i copy and paste my api key from the gui to this file: /data/crits_services/mcrits/local/mcrits.conf

[info]
url = https://127.0.0.1
username = my user admin 
api_key =  my user admin api

5. i imported mcrits.mtz to maltego

maybe i'm missing somthing- i'll appriciate all of your help.

[Michael Goffin]

Most likely an issue with patting. Manage each transform and in the bottom right make sure all of the paths are accurate to your operating system.

--
You received this message because you are subscribed to the Google Groups "crits-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to crits-users...@googlegroups.com.
To post to this group, send email to crits...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/crits-users/5d920af4-6096-49f1-8e67-274f77569a8d%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[Wesley Shields]

Mike is right, fix the path to python if necessary and the current
working directory for each transform.

On a related note, I've done a bunch of work in this space over the past
few days and will soon have a large pull request up that you may want to
wait for.

Effectively, what I've done is re-work the mcrits code to use a python
wrapper around the CRITs API I wrote, called pycrits. This makes the
code much cleaner. I also added the ability to start at any given CRITs
object in Maltego (as long as it has an ID) and perform searches against
CRITs from that point forward.

I hope to have a PR up in between meetings today.

-- WXS

> > <https://groups.google.com/d/msgid/crits-users/5d920af4-6096-49f1-8e67-274f77569a8d%40googlegroups.com?utm_medium=email&utm_source=footer>
> > .

> > For more options, visit https://groups.google.com/d/optout.
> >
>

> --
> You received this message because you are subscribed to the Google Groups "crits-users" group.
> To unsubscribe from this group and stop receiving emails from it, send an email to crits-users...@googlegroups.com.
> To post to this group, send email to crits...@googlegroups.com.

> To view this discussion on the web visit https://groups.google.com/d/msgid/crits-users/CAPK3G88%3Dst4cTqUfqZx5ZbbXA%2By40EDrj-R08yOr56K32nwo5A%40mail.gmail.com.

[asaf]

thanks for the reply michael and goffin.

i forget to mention that i'm new in python and i don't understand how to set the path and to what path i'm directing.

also from your reply i understand i need to change the path of the transactions in maltego.

please if you can explain in a more simple way it will be super!

thanks alot.

[Wesley Shields]

In Maltego there is a way to manage transforms. You need to select each
transform and for each one you need to ensure that under "Properties"
the path to your python install is correct and that the working
directory points to where ever you put mcrits.

-- WXS

> > > On Wed, Dec 3, 2014 at 8:42 AM asaf <asafda...@gmail.com <javascript:>>

> > wrote:
> > >
> > > > hi all,
> > > >
> > > > i'm running crits and maltego on ubuntu 14 lts (4-master).
> > > > when i try to view my TLO using maltego i get an error:
> > > > "no such file or directory" (i attached the error message).
> > > >
> > > > 1. i checked enable api
> > > > 2. i added services directory: /data/crits_services (in this directory
> > are
> > > > all my services including mcrits directory)
> > > > 3. i added instance url: https://127.0.0.1
> > > > 4. i copy and paste my api key from the gui to this file:
> > > > /data/crits_services/mcrits/local/mcrits.conf
> > > >
> > > > [info]
> > > > url = https://127.0.0.1
> > > > username = my user admin
> > > > api_key = my user admin api
> > > >
> > > > 5. i imported mcrits.mtz to maltego
> > > >
> > > > maybe i'm missing somthing- i'll appriciate all of your help.
> > > >
> > > > --
> > > > You received this message because you are subscribed to the Google
> > Groups
> > > > "crits-users" group.
> > > > To unsubscribe from this group and stop receiving emails from it, send
> > an

> > > > email to crits-users...@googlegroups.com <javascript:>.

> > > > To post to this group, send email to crits...@googlegroups.com

> > <javascript:>.

> > > > To view this discussion on the web visit
> > > >
> > https://groups.google.com/d/msgid/crits-users/5d920af4-6096-49f1-8e67-274f77569a8d%40googlegroups.com
> > > > <
> > https://groups.google.com/d/msgid/crits-users/5d920af4-6096-49f1-8e67-274f77569a8d%40googlegroups.com?utm_medium=email&utm_source=footer>
> >
> > > > .
> > > > For more options, visit https://groups.google.com/d/optout.
> > > >
> > >
> > > --
> > > You received this message because you are subscribed to the Google
> > Groups "crits-users" group.
> > > To unsubscribe from this group and stop receiving emails from it, send

> > an email to crits-users...@googlegroups.com <javascript:>.

> > > To post to this group, send email to crits...@googlegroups.com

> > <javascript:>.

[asaf]

thanks, i'll try it and update soon.

[asaf]

hi, as i promised here is the update:

i used the transforms manager and changed the working dir to the path i putted mcrits transform directory.

i untouched the python directory, cause i believe it's the right one- correct me please if i worng.

now i get a different error:

Transform 'List Campaigns' returned the following error(s):

- Local transform "/usr/bin/python" returned with exit code 1

again i'll appreciate your help.

[Michael Goffin]

I believe you're missing some python dependencies. In specific I think "requests" is one you'll need to install. If you modify the transforms again you can enable debug output (it's a checkbox I think) and it should give you more of the error.

[Wesley Shields]

There is a checkbox to turn on debugging, which will give you more
output when the transform is run. The debugging output is likely to give
you enough to debug the problem.

Honestly, you're better off waiting until my PR is in (and likely
accepted) as it drastically reworks a lot of how mcrits functions. I
wanted to have it up a day or so ago but things have been rather hectic
lately.

-- WXS

[asaf]

i hope for all of us that you will acomplish the mission- my goal is to examine this megical tool and it's related services.

btw, i believe it's because of python dependencies missing- how do i add the "requests" to python? (sorry if it's a low level question)

[Wesley Shields]

https://pypi.python.org/pypi/requests

-- WXS

> To unsubscribe from this group and stop receiving emails from it, send an email to crits-users...@googlegroups.com.
> To post to this group, send email to crits...@googlegroups.com.
> To view this discussion on the web visit https://groups.google.com/d/msgid/crits-users/49098e16-0206-497c-96e0-19bc42aa0331%40googlegroups.com.

[asaf]

ok, 

i followed your instructions and try to install requests- then i got a message telling me that requests are already installed.

so i turn on the debug mod and here is the error (in the attachment).

[Wesley Shields]

Is "mcrits" a valid hostname in your setup? My guess is no.

-- WXS

> > https://groups.google.com/d/msgid/crits-users/49098e16-0206-497c-96e0-19bc42aa0331%40googlegroups.com.
> >
> > > For more options, visit https://groups.google.com/d/optout.
> >
> >
>
> --
> You received this message because you are subscribed to the Google Groups "crits-users" group.
> To unsubscribe from this group and stop receiving emails from it, send an email to crits-users...@googlegroups.com.
> To post to this group, send email to crits...@googlegroups.com.

> To view this discussion on the web visit https://groups.google.com/d/msgid/crits-users/105cca89-f438-4656-8e92-d9092fbc6084%40googlegroups.com.

[asaf]

ok, i changed the conf file to the url of my crits.

now using maltego i can see campaigns and indicador's type and indicator but i can't see actors for some reason.

thanks for all the help :)

i'm waiting for your new project :)