- [Omar Santos] Maltego is a pretty interactive
data mining tool that is used in online investigations
for finding relationships between pieces of information
from many different sources on the Internet.
It is used by many pentesters to do reconnaissance
of things like a company or an organization
or individuals, and then actually you use that information
to perform social engineering attacks.
It actually allows you to build relationships
between these entities so then you can actually understand
your target and perform those social engineering attacks.
Now, the Maltego Community Edition is the free version
of Maltego that you can download
after a quick online registration.
You do have to actually register
in order to actually use Maltego.
It will actually ask you for the registration credentials
whenever you first start it.
Now, Maltego comes by default in Kali Linux
so the Maltego Community Edition, and this Community Edition
includes most of the same functionality as
the commercial version, however, it has some limitations.
The main limitation with the Community Edition is
that the application cannot be used for commercial purposes
so again if you're a commercial pentester, make sure
that you actually have the full version,
so the commercial version, and there's also a limit
on the amount of number of entities that can be returned
from a single transform, and you will actually learn
what are entities and what are transforms in a few minutes.
Now, Maltego is maintained by Paterva,
and I'm actually including a link to their website
and also showing here a table that they actually have
on their website that includes a comparison
between all the versions of Maltego,
including the Community Edition.
Now, let's first define the three main components
of the Maltego tool.
The first one is actually the entity,
and an entity is represented as a note on a graph,
and it can be anything, such as a DNS name,
the name of a person, a phone number, an email address,
and many others.
Now, the Maltego client comes with
about 20 different entities that actually you use
in online investigations, but you can also make
your own custom entities as well.
Now, the second component is a transform,
and a transform is apiece of code that takes one entity
to another, in other words, it actually does this
by querying data from a data source on the Internet
and then returning the results as new entities
in your graph, and data sources are places like DNS servers,
search engines, social networks, who-is information,
and many others.
Now, you also have the concept of machines,
and machines chain multiple transforms together
to automate common tasks, to provide you actually
with the ability to do automation.
Now, there are a couple of ways to create a new graph
in Maltego: you can either click the plus sign
in the top left-hand corner of the Maltego client,
it's actually the one next to the application button,
or use the shortcut in the keyboard, Control + T.
Now, once you have created a new graph, you will get
a fresh page within the new tab, and this is actually
surrounded by a range of control windows.
Under the entity pallette, or the panel, you will see
the different entities available in Maltego.
You can add entities from the community, which I will show
later in this lesson, or you can actually create your own.
Now, to add a new entity to your graph,
click and hold the desired entity and then drag it
onto the graph area.
Now, in this example, I'm actually using the person entity
and I'm actually adding my name to it.
The once you actually have this entry created,
so this entity, you can then right-click the entity
and select a specific transform that you want to run,
and in this case actually I'm going to run
all the transforms that are available
to see what the tool discovers, and as you can see,
the tool is actually pretty fast
and also pretty comprehensive.
You can see that within a couple of seconds
it actually found my picture and other relationships,
and other, eight pieces of information
that are available on the Internet
and within the different transforms
that are enabled in Maltego.
It actually even found things like where I work
and the team that I belong to.
You can even right-click on the things that are found
like I'm showing here, and then run transforms against it,
so here I'm actually running a transform against the team
that I belong to so, the entity that actually showed,
as you can see, with time and with patience
you can build a pretty good relationship map
of an individual or a company.
You can then use this information to carry out
social engineering attacks, for example, you can find
an individual's LinkedIn profile or other folks
that he or she may know or may be related to,
whether the person actually has worked or currently works,
any other references to the things he or she has done
in the past or posted on Internet, and of course
you can do the same thing against a company,
and there's actually a function within Maltego
that is called a company stalker.
In this case, I'm actually showing that functionality
and I'm just using example.com as an example.
Now, in this other example I'm actually using
my person site, which is omar santos de rayo,
and there you can actually see that it provides
a pretty comprehensive relationship map
of associated servers, references to other Internet content
that may actually be related and many other information.
You can also create maps of a person's Twitter activity
as I'm demonstrating here, so you actually have
a transform specifically and an integration
with actually Twitter, and for that to work
you do need to have a Twitter account, and you need to use
actually the Twitter IPI functionality
and a Twitter IPI token.
Now, another cool thing about Maltego is
that it actually has a community transform hub.
For example, you can download transforms
for things like Shodan, Virus Total, SensePost toolset,
and even websites and repositories
like the website haveibeenpwned.
Now, as you can see, Maltego is a pretty powerful tool
that will not only automate or allow you to automate
a lot of the task but also allows you
to perform reconnaissance on people,
companies, and other organizations,
so then you can actually perform social engineering attacks
with tools like SET like you learned in the previous lesson.