All right, good afternoon.
Today, we're going to mess around with Maltego a little bit.
We're just gonna do a high level entry overview of the tool
you can see here that I've got my cli box up and going,
I'm gonna start off by opening terminal
logo
comes preinstalled
inside your Cali box.
So all you have to type in is Maltego and the
command-line interface and it will start the tool right up.
Now, when you first start Maltego for the very first time,
you're going to have to register the product, which means you have to go through,
answer some questions and go through the process of
basically going through and just installing it, right?
You want the community dish and that's the free version.
And eventually after you're done verifying your
information and going through the entire rigmarole,
you will land on this page.
Now,
you can see here on the left hand side,
it's providing different news and credits provides a little bit
of what's going on with Maltego in the world.
And on the right hand side, you'll see this transform hub
and then the transform
hub partners below.
You can see here that I have clicked the free one.
If I do all,
then it provides me all the transforms available for the access options.
You can see different categories as well.
Let's say that I wanted specifically Cryptocurrency.
I could click on that one. Now, I'm going to clear this out
because I'm a cheap person
or frugal. I like to say
we're going to do the free versions only. So I'm going to go free API tools
and this basically provides me a list
of the 15 tools available or transforms available
uh that are free to use.
So you can kind of scroll over it and you can say, OK, well, this one does this,
for instance,
Ethernet Etherscan
is a block explorer and
Lex platform.
And if I want more details,
I just click on the details button and it provides me a little
bit more information about what's going on with it to install it.
I literally just click the install button.
Now
as a first time user, I would just kind of install all of them.
We're not gonna install all of them together for the sick time.
But if I was you, if I was a student trying to get into it, I would just click all of them.
And so I'm gonna do
URL scan right there. Do
I,
I'm gonna press Yes,
and it's gonna go through it. Now, you may be asked in the red right here. Hey,
um
an API key and it's just your email address that you utilized.
And if you just press that, it'll be, it'll go right through.
So I'm going to press next and it's going to go through. It's going to install.
You can see that one application server of 33 transforms night in
D and seven transform sets for the specific tool.
So again,
if I wanted the who is one, I could install that press. Yes,
and just hit next. And we go to finish real real simple.
And you can sign to see the ones that you've
already installed because I did the search transform already.
But I basically installed for now.
I could go through and install all of these if I wanted to,
but that's not what you came here for.
All right. So I'm going to press this new button right at the top left to outside
and on the left hand side,
you'll start to see
different
uh search points, right? So
I can expand these out, I can
rate them, but you can kind of see that I have different aspects on the left hand side.
So let's go to a
specific, I don't know, let's go to person personnel.
Let's do alias document, let's do an email address.
Now, let's do a person, let's do a person.
So we're just gonna grab that and drag it off to
the right hand side onto our little graph right here.
If I double click on it,
it's gonna ask me for the name of the target that I want to utilize.
Now,
who do I want to go against?
Well, let's go against, uh,
I don't know, let's go against
the president. Now, let's do Elon Musk.
Elon Musk is always a favorite. Favorite. We'll do Elon Musk. Ok. All right.
To get this up and going,
we're going to right click
and I can do all kinds of different aspects with this or I can double click and I can
go through and point out different notes.
I can do surnames, I can do first names, so on and so forth.
I can do different attachments.
I can provide notes if I wanted to and you can see the different properties
pretty easy. I'm just going to press, OK.
It's nice.
If I was doing Maltego for a company, then I could actually provide a little, a
little note in there, a little picture if I really wanted to.
All right.
So if I click on this button,
it just provides a detailed view. It's the flag.
Yeah,
there we go.
All right. So I'm going to right click on it
and I can see all the transforms right here
with a little button button
and I can see all the transforms. And I want to do, for instance, if I wanted to do
standard transforms,
I can press little
double arrow button and it will look for everything. I'm just going to click
the double arrow for Standard transforms right there.
And it's going to ask me what domain that I would like to use.
Now, obviously, I'm going to use tesla.com.
I don't have any phone numbers or email addresses,
but I'm going to press
one
and it's going to go through and start connecting
Elon Musk
with as much information that it can possibly
gather and we can see that it's already populating
with different email addresses
associated with it that it's found. Now, not all these are going to be 100% accurate.
For instance, I highly doubt
that Elon Musk has Elon dot Musk at hotmail.com.
I mean, maybe I'm wrong, maybe, maybe he does,
but I doubt it right.
So you can also see
Elon at tesla.com again, probably a throwaway email address
where you can see Elon at email.com and you can see
that it's running through the transforms as we go through.
Now, I can expand, I can close in, I can go through this entire process if I wanted to,
but it just provides that graphical interface to kind of go through and identify it.
Now, it's identified all those email addresses.
But what happens if I want something else? So again, we can right click
now, we can do search transforms and do the same thing.
And again, it's going to ask for the domain. I can just type in tesla.com.
Uh I can run it again, I can even remember these settings. I'm not going to.
But I could,
if I wanted to and you can see that it's gonna start running through different API S
and it'll start populating those as it goes if there's any available.
So it's kind of going through and it already stopped.
So it's pretty much already done through that. Now,
I could do
the who is XML. Remember that's the transform that we downloaded
into the system and I could press that one and it will start going through as well
and see if it populates with anything. And here we can see that it's provided
all this juicy information. If I want to expand that out, I just literally
scroll my mouse through a little bit and go through it.
And it just kind of provides
that graphical interface of everything that's associated
that it's found with Elon Musk and Tesla
and that's really what it's going through.
OK? And we can see all these different things. If I wanted some information on this,
I just double click on it. And it's basically telling me XC 442.21 one.com
and then I can provide the properties and
that's just the domain it's associated with.
OK.
Now again, you have to take this with a little bit of a little bit of salt, right?
It can't be 100% accurate.
It is open source intelligence gathering, which means it's not always accurate.
But
yeah.
All right. So that's, that's
Maltego, you can play around with this thing, you could add more into it.
Let's say that you know his phone number or there
was a specific phone number you wanted to do,
you just drop that in there
and then put the phone number in there, make sure that it is international
as you can see. So make sure you're adding that international phone number,
right? You could do an image if you wanted to populate an image.
Um Let's go up a little bit. If you wanted a
device,
say you knew the desktop computer you can use from there,
maybe a mobile phone device,
you could probably put a phone number in there and figure out what's going on there.
It just provides a lot of different tools.
Obviously, the more transforms that you have available,
the better
over here, right?
So obviously, if I do more either scans and other items,
then I will have more transformers,
more transformers allows me to pick through more data
and that more data is going to lead me to more open source intelligence, right?
So again, that's Maltego,
it provides us a high level overview of open source intelligence gathering.
I personally prefer something called spiderfoot.
Uh but
you know,
Maltego is not a bad tool. I like the graphical interface that it provides.
And again, you can get through right here
and go through it if you really want. All right. So that's
Maltego in a nutshell, very quick, very dirty.
Uh I hope that was helpful. We'll see you next time.