Social Mapper is an open-source intelligence tool designed for penetration testers and red teamers to automate the enumeration and correlation of social media profiles. It leverages facial recognition to identify and group individuals across various platforms, streamlining the data gathering process for targeted campaigns and intelligence gathering.

How It Works

The tool utilizes Selenium and Firefox to automate web scraping across supported social media platforms. It takes inputs like company names, CSV files, or folders of images, and employs facial recognition with adjustable thresholds to match individuals. This approach aims to reduce false positives and accelerate the review of gathered data, providing actionable intelligence for security professionals.

Quick Start & Requirements

• Install: Clone the repository, install Firefox, geckodriver, and then run python3 -m pip install --no-cache-dir -r requirements.txt from the setup directory.
• Prerequisites: Python 3, Firefox, geckodriver, and specific Linux development libraries (build-essential, cmake, libgtk-3-dev, libboost-all-dev). macOS users may need additional Xcode, brew, and xquartz installations.
• Configuration: Requires manual entry of social media credentials into social_mapper.py and setting account languages to 'English (US)'. Initial login to each social media profile via Firefox is necessary to handle "unknown browser" prompts.
• Documentation: https://github.com/Greenwolf/social_mapper

Highlighted Details

• Supports LinkedIn, Facebook, Pinterest, Twitter, Google Plus, Instagram, VKontakte, Weibo, and Douban.
• Input formats include company names, CSV files, and folders of images.
• Facial recognition threshold can be adjusted ('loose', 'standard', 'strict', 'superstrict').
• Can generate CSV files with email addresses and profile links for phishing frameworks.

Maintenance & Community

The project is explicitly stated as "no longer actively maintained," but the author accepts pull requests. Key contributors are listed, including Vincent Yiu & MDSEC (inspiration), janmei, alexsok-bit, ewpratten, cclauss, TADT1909, Molkree, and kix-s.

Licensing & Compatibility

The README does not explicitly state a license. Compatibility for commercial use or closed-source linking is not specified.

Limitations & Caveats

Facebook actively detects and blocks the tool after a few hundred searches, necessitating the use of disposable accounts. The tool's effectiveness is dependent on social media platform layout stability, requiring potential manual fixes for site changes.