Maltego-powered OSINT tool for investigating Telegram

---

Features • Install • Usage

---

Maltego Telegram is an OSINT utility that enables investigations on Telegram through a collection of Maltego Transforms. It brings Telegram data into Maltego, helping investigators explore connections and visualize relationships. Maltego Telegram is built for one thing — Telegram investigations — and makes them simple and intuitive.

Features

Sticker and emoji pack owners

Sticker and custom emoji packs can provide another way to identify their creators.

• Identify the account associated with a pack’s creation.
• Resolve the creator’s profile when accessible.
• Map the connection between the pack and its creator in Maltego.

A creator’s account can provide a link between otherwise unrelated packs.

Similar channels

Telegram displays related channels as a list. Mapping these recommendations in Maltego makes their connections easier to explore.

• Retrieve channel recommendations through the Telegram API.
• Display channels as entities connected by recommendation links.
• Expand the graph to identify groups of related channels.

Expand recommendations from multiple channels to find shared connections.

Profiles linked to a channel

Forwarded messages may contain references to their original authors. These can reveal personal profiles associated with a channel.

• Inspect forwarding metadata for references to user accounts.
• Resolve accessible author profiles.
• Connect those profiles to the channel in Maltego.

Older forwards may retain author links after privacy settings change.

Deleted posts and archived content

Telegram assigns sequential numeric IDs to channel messages. Gaps in the sequence can help locate potentially deleted posts.

• Detect missing IDs in a channel’s message history.
• Check public Telegram archives for matching channel and post IDs.

Archived copies may include the original text, media, and publication date.

---

There’s more to explore. Browse the full collection of Transforms for additional capabilities.

Install

1. Clone the repository

git clone https://github.com/vognik/maltego-telegram
cd maltego-telegram

1. Install dependencies

pip install -r requirements.txt

1. Configure Telegram API credentials

Obtain your api_id and api_hash from Telegram, then add them to config.ini.

1. Log in to Telegram

python login.py

Follow the prompts to authenticate your Telegram account.

1. Generate Maltego Transform files

python project.py

1. Import into Maltego

In Maltego, open Import Config and import both generated files:

• entities.mtz
• telegram.mtz

Usage

1. Drag an entity from the Entity Palette onto the graph.
2. Right-click the entity to view available Transforms.
3. Select a Transform to run it.

https://github.com/user-attachments/assets/dba4b5b1-a82d-4e26-b8e4-d063f5456f88

License

Maltego Telegram is licensed under the GNU General Public License v3.0.

Built for the OSINT community. Contributions, ideas, and feedback are welcome.

Use responsibly and only for lawful investigations.