📌 Overview
METAØNEX is a comprehensive Facebook Intelligence Suite designed for security research, penetration testing, and educational purposes. It provides advanced reconnaissance capabilities for understanding privacy risks and security vulnerabilities in social media platforms.
🎯 Purpose
· Educational Research: Understanding OSINT techniques · Security Testing: Identifying vulnerabilities · Privacy Awareness: Demonstrating data exposure risks · Bug Bounty Hunting: Responsible vulnerability discovery
IMPORTANT: This tool is for EDUCATIONAL AND RESEARCH PURPOSES ONLY. Use only on accounts you own or have explicit written permission to test. Unauthorized access is illegal and violates Facebook's Terms of Service. The author is not responsible for any misuse.
✨ Features
🔍 Core Capabilities
Feature Description Status Account Checker Check existence by email, phone, or username ✅ Profile Extraction Full profile data extraction ✅ Social Mapper Multi-platform account discovery ✅ Batch Processing Threaded parallel search ✅ Database Storage SQLite with search history ✅ Multi-Format Export JSON, CSV, HTML ✅
🛡️ Advanced Features
Feature Description Status Proxy Rotation Automatic proxy management ✅ Rate Limiting Anti-detection protection ✅ User Agent Rotation Random browser fingerprints ✅ Beautiful TUI Rich-based interface ✅ Fallback CLI Works without Rich ✅ Comprehensive Logging Debug and error tracking ✅
📊 Data Extraction Capabilities
Personal Information
Identity:
- Full Name
- User ID
- Username
- Profile URL
Contact:
- Email Address
- Phone Number
- Address
Profile:
- Gender
- Birthday
- Bio
- Verification Status
Media:
- Profile Picture
- Cover Photo
History:
- Work Experience
- Education History
- Friends Count
- Followers Count
- Posts Count🚀 Installation
Prerequisites
# Required
Python 3.7+
pip (Python package manager)
# Optional but Recommended
Git
Virtual EnvironmentQuick Install
# Clone the repository
git clone https://github.com/sylhetyhackvenger/METAONEX
cd METAONEX
# Install dependencies
pip install -r requirements.txt
# Run the tool
python3 facebook.pyRequirements File
requests>=2.31.0
beautifulsoup4>=4.12.0
rich>=13.0.0
lxml>=4.9.0
html5lib>=1.1
pytz>=2023.0
python-dateutil>=2.8.0📖 Usage Guide
Basic Usage
# Interactive TUI Mode (Recommended)
python3 facebook.py
# Fallback CLI Mode (No Rich)
python3 facebook.py --no-richMenu Options
📋 MAIN MENU
────────────────────────────────────────
1. 🔍 Search Account
2. 📦 Batch Search
3. 🌐 Social Mapper
4. 📜 View History
5. 📤 Export Data
6. 📈 Statistics
7. ⚙️ Settings
8. ℹ️ About
9. 🚪 Exit
Search Examples
- Search by Email
> Enter query: [email protected]
✅ Account found!
Name: John Doe
User ID: 1000123456789
Profile: https://facebook.com/john.doe
Email: [email protected]
Phone: +1-234-567-8900
Work: Google Inc. - Software Engineer- Search by Phone
> Enter query: +1-234-567-8900
✅ Account found!
Name: Jane Smith
User ID: 1000987654321
Profile: https://facebook.com/jane.smith- Search by Username
> Enter query: john.doe
✅ Account found!
Name: John Doe
User ID: 1000123456789
Profile: https://facebook.com/john.doeBatch Search
📦 Batch Search
────────────────────────────────────────
Enter queries (one per line). Press Enter twice to finish.
> [email protected]
> +1-234-567-8900
> jane.smith
> [ENTER]
> [ENTER]
Searching 3 accounts...
Processing... ━━━━━━━━━━━━━━━━━━━━━━━━━━━ 100%
Results:
Found: 3
Not found: 0
Found accounts:
• [email protected] -> John Doe
• +1-234-567-8900 -> Jane Smith
• jane.smith -> Jane SmithSocial Mapper
🌐 Social Mapper
────────────────────────────────────────
Enter names to search (format: First Last)
Example: John Doe
> John Doe
> Jane Smith
> Bob Johnson
> [ENTER]
Mapping... ━━━━━━━━━━━━━━━━━━━━━━━━━━━ 100%
Results:
✅ John Doe -> John Doe (https://facebook.com/john.doe)
✅ Jane Smith -> Jane Smith (https://facebook.com/jane.smith)
✅ Bob Johnson -> Bob Johnson (https://facebook.com/bob.johnson)📁 Directory Structure
METAONEX/
├── metaohex.py # Main application
├── requirements.txt # Dependencies
├── README.md # Documentation
├── LICENSE # MIT License
├── exports/ # Exported data
│ ├── *.json
│ ├── *.csv
│ └── *.html
├── social_mapper_results/ # Social mapper results
│ ├── *.json
│ ├── *.csv
│ └── *.html
└── metaohex.db # SQLite database
🔧 Advanced Configuration
Proxy Support
# Enable proxy rotation
settings > Toggle Proxy Usage
# Proxies are automatically loaded from:
- https://raw.githubusercontent.com/TheSpeedX/PROXY-List/master/http.txt
- https://raw.githubusercontent.com/ShiftyTR/Proxy-List/master/http.txt
- https://raw.githubusercontent.com/mertguvencli/http-proxy-list/main/proxy-list/data.txtRate Limiting
# Default settings
max_requests_per_minute: 20
request_delay_min: 0.5
request_delay_max: 2.0
timeout: 30
max_retries: 3User Agents
# Random rotation from 8+ modern browsers
USER_AGENTS = [
'Chrome 120',
'Chrome 119',
'Firefox 115',
'Firefox 118',
'Safari 17',
'Edge 120',
# ... and more
]📊 Export Formats
JSON
{
"user_id": "1000123456789",
"username": "john.doe",
"name": "John Doe",
"email": "[email protected]",
"phone": "+1-234-567-8900",
"gender": "Male",
"birthday": "1990-01-15",
"profile_url": "https://facebook.com/john.doe",
"is_verified": false,
"status": "found",
"confidence_score": 0.9
}CSV
User ID,Username,Name,Email,Phone,Gender,Birthday,Profile URL,Verified,Status,Timestamp
1000123456789,john.doe,John Doe,[email protected],+1-234-567-8900,Male,1990-01-15,https://facebook.com/john.doe,False,found,2024-01-15T10:30:00HTML
· Beautiful visual report · Responsive design · Clickable profile links · Profile picture display · Work/education history · Statistics summary
🛡️ Security Features
Built-in Protections
· ✅ Rate limiting to prevent abuse · ✅ User agent rotation for anonymity · ✅ Proxy support for IP masking · ✅ Request retry with backoff · ✅ Error handling and recovery · ✅ Session management · ✅ Cookie handling
Best Practices
# Always enable rate limiting
config.max_requests_per_minute = 20
# Use proxies for anonymity
config.use_proxy = True
# Rotate user agents
fingerprint.rotate()
# Add random delays
time.sleep(random.uniform(0.5, 2.0))
🔍 Detection Indicators
For Defenders
1. High frequency of Facebook requests
2. Unusual user agent strings
3. Requests to mbasic.facebook.com
4. Rapid succession of lookups
5. Unusual POST request patterns
6. Missing browser cookies/session
7. Suspicious proxy/VPN usage
8. Pattern of "forgot password" lookups
Mitigation Strategies
# Implement rate limiting
def detect_scanning(ip_address, requests):
if requests > threshold:
block_ip(ip_address)
# Use CAPTCHA for repeated lookups
def challenge_suspicious(user):
if user.request_count > 5:
show_captcha()
# Monitor for unusual patterns
def analyze_pattern(requests):
if is_bot_pattern(requests):
log_suspicious_activity()🎓 Educational Use Cases
Security Research
- Privacy Audits: Test what data is publicly accessible
- OSINT Training: Learn reconnaissance techniques
- Social Engineering: Understand attack vectors
- Vulnerability Discovery: Identify weaknesses
- Security Awareness: Demonstrate privacy risks
Academic Research
- Data Privacy Studies: Analyze information exposure
- Social Network Analysis: Study online behavior
- Cybersecurity Education: Practical learning tool
- Ethical Hacking Labs: Controlled environment testing
- Security Research Projects: Academic publications
🤝 Contributing
How to Contribute
- Fork the Repository
git fork https://github.com/sylhetyhackvenger/METAONEX
- Create Feature Branch
git checkout -b feature/AmazingFeature
- Commit Changes
git commit -m 'Add AmazingFeature' - Push to Branch
git push origin feature/AmazingFeature
- Open Pull Request · Submit PR with detailed description · Wait for review · Address review comments
Development Guidelines
# Code Style
- Follow PEP 8 guidelines
- Add type hints
- Write docstrings
- Include error handling
- Add logging
- Write tests
# Feature Development
- Create issue first
- Discuss with team
- Implement feature
- Add documentation
- Update README
- Submit PR📝 License
This project is licensed under the MIT License - see the LICENSE file for details.
👨💻 Author
SYLHETYHACKVENGER (THE-ERROR808)
· 🌐 GitHub · 🐦 Twitter · 📧 Email
🙏 Acknowledgments
· Security Community: For ethical hacking guidelines · OSINT Community: For reconnaissance techniques · Bug Bounty Programs: For responsible disclosure · Open Source Contributors: For dependencies · Facebook: For security awareness
📚 References
Security Resources
· OWASP OSINT Guide · SANS OSINT Resources · Facebook Security
Legal References
· Computer Fraud and Abuse Act · GDPR Compliance · Facebook Terms of Service
Tools & Frameworks
· Requests · BeautifulSoup · Rich
📞 Support
Getting Help
· 📖 Documentation · 🐛 Issue Tracker · 💬 Discussions
Reporting Issues
- Check existing issues
- Create new issue with: · Description · Steps to reproduce · Expected behavior · Actual behavior · Screenshots (if applicable) · Environment details
Feature Requests
- Search existing requests
- Create new request with: · Feature description · Use case · Benefits · Implementation ideas
🔐 Security Policy
Reporting Vulnerabilities
· Email: [email protected] · PGP Key: [Available on request] · Response Time: 48 hours · Disclosure: Responsible disclosure
Responsible Disclosure
- Report vulnerability
- Allow 90 days for fix
- Coordinate public disclosure
- Credit to reporter
📊 Project Statistics
🏆 Acknowledgments
Security Researchers
· Thanks to the security community for ethical guidelines · Appreciation for OSINT researchers · Respect for bug bounty hunters
Open Source Contributors
· All contributors who helped improve this tool · Developers of the awesome libraries used · Community members who provided feedback
📌 Disclaimer
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES
OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT
HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR
OTHER DEALINGS IN THE SOFTWARE.
Made with ❤️ by SYLHETYHACKVENGER (THE-ERROR808)