All right.
Good afternoon.
Today we're going to mess around with Maltego a little bit.
We're just going to do a high level entry overview of the tool.
You can see here that I've got my Kali box up and going.
I'm going to start off by opening a terminal.
Blow that up for you.
Maltego comes pre-installed inside your Kali box.
So all you have to type in is Maltego and the command line interface, and it'll start the tool right
up.
Now when you first start Maltego for the very first time, you're going to have to register the product,
which means you have to go through and answer some questions and go through the process of basically
going through and just installing it.
Right.
You want the community edition.
That's the free version.
And eventually after you're done verifying your information and going through the entire rigmarole,
you will land on this page.
Now you can see here on the left hand side, it's providing different news and credits.
It provides a little bit of what's going on with Maltego in the world.
And on the right hand side you'll see this Transform hub and then the Transform Hub Partners.
Below you can see here that I've clicked the free one.
If I do all, then it provides me all the transforms available for the access options.
You can see different categories as well.
Let's say that I wanted specifically cryptocurrency.
I could click on that one.
Now I'm going to clear this out because I'm a cheap person or frugal as I like to say, we're going
to do the free versions only.
So I'm going to go free API tools.
And this basically provides me a list of the 15 tools available or transforms available that are free
to use.
So you can kind of scroll over it and you can say, okay, well, this one does this.
For instance, Ethernet ether scan, uh, is a block explorer and Linux platform.
And if I want more details, I just click on that details button and it provides me a little bit more
information about what's going on with it.
To install it, I literally just click the install button.
Now, as a first time user, I would just kind of install all of them.
We're not going to install all of them together for the sake of time.
But if I was you, if I was a student trying to get into it, I would just click all of them.
And so I'm going to do URL scan right There-i'll I'm going to press yes.
And it's going to go through it.
Now you may be asked in the red right here.
Hey um, an API key and it's just your email address that you utilized.
And if you just press that, it'll be it'll go right through.
So I'm going to press next and it's going to go through.
It's going to install.
And you can see that one application server 33 transforms nine entities and seven transform sets for
the specific tool.
So again if I wanted the who is one I could install that.
Press yes and just hit next.
Let me go finish real real simple.
And you can sign to see the ones that you've already installed.
Because I did the search transform already, but I basically installed three.
Now I could go through and install all of these if I wanted to, but that's not what you came here for.
All right.
So I'm going to press this new button right at the top left hand side.
And on the left hand side you'll start to see different, uh, search points.
Right.
So I can expand these out, I can create them, but you can kind of see that I have different aspects
on the left hand side.
So let's go to specific I don't know.
Let's go to person personnel.
Let's do alias document.
Let's do an email address.
Now let's do a person.
Let's do a person.
So we're just going to grab that and drag it off to the right hand side onto our little graph right
here.
If I double click on it, it's going to ask me for the name of the target that I want to utilize.
Now who do I want to go against?
Well, let's go against uh, I don't know.
Let's go against the president.
No, let's do Elon Musk.
Elon Musk is always a fan favorite.
We'll do Elon Musk okay.
All right.
To get this up and going.
We're going to right click.
And I can do all kinds of different aspects with this.
Or I can double click and I can go through and point out different notes.
I can do surnames, I can do first names, so on and so forth.
I can do a different attachments, I can provide notes if I wanted to.
And you can see the different properties pretty easy.
I'm just going to press okay.
It's nice.
If I was doing maltego for a company then I could actually provide a little, uh, little note in there,
a little picture if I really wanted to.
Right.
So if I click on this button.
It just provides that detailed view.
It's a flag.
And there we go.
All right.
So I'm going to right click on it.
And I can see all the transforms right here.
This little button button.
And I can see all the transforms.
So I'm going to do for instance if I want to do standard transforms I can press the little double arrow
button and it will look for everything.
I'm just going to click the double arrow for standard transforms right there.
And it's going to ask me what domain that I would like to use.
Now obviously I'm going to use Tesla.com.
I don't have any phone numbers or email addresses, but I'm going to press run and it's going to go
through and start connecting Elon Musk with as much information that it can possibly gather.
And we can see that it's already populating with different email addresses associated with it that it's
found.
Now, not all of these are going to be 100% accurate.
For instance, I highly doubt that Elon Musk has Elon Musk at hotmail.com.
I mean, maybe I'm wrong.
Maybe, maybe he does, but I doubt it.
Right.
So you can also see Elon at Tesla.com.
Again probably a throwaway email address where you can see Elon at gmail.com.
And you can see that it's running through the transforms as we go through.
Now I can expand I can close in, I can go through this entire process if I wanted to, but it just
provides that graphical interface to kind of go through and identify it.
Now it's identified all those email addresses.
But what happens if I want something else.
So again we can right click and we can do search transforms and do the same thing.
And again it's going to ask for the domain I can just type in Tesla.com I can run it again.
I can even remember these settings.
I'm not going to but I could if I wanted to.
And you can see that it's going to start running through different APIs, and it'll start populating
those as it goes if there's any available.
So it's kind of going through and it already stopped.
So it's pretty much already done through that.
Now I could do the who is XML?
Remember that's the transform that we downloaded into the system.
And I could press that one and it'll start going through as well and see if it populates with anything.
And here we can see that it's provided all this juicy information.
If I want to expand that out, I just literally scroll my mouse wheel a little bit and go through it,
and it just kind of provides that graphical interface of everything that's associated that it's found
with Elon Musk and Tesla, and that's really what it's going through, okay.
And we can see all these different things.
If I wanted some information on this I just double click on it and it's basically telling me Xc40 for
2.211.com, and then I can provide the properties.
And that's just the domain it's associated with.
Okay.
Now again you have to take this with a little bit of a little bit of salt.
Right.
You can't be 100% accurate on it.
It is open source intelligence gathering which means it's not always accurate.
But yeah.
All right.
So that's that's Maltego.
You can play around with this thing.
You could add more into it.
Let's say that you know his phone number or there was a specific phone number you wanted to do.
You just drop that in there and then put the phone number in there.
Make sure that it is international.
As you can see.
So make sure you're adding that international phone number.
Right.
You could do an image if you wanted to populate an image.
Um, let's go up a little bit.
If you wanted a device, let's say you knew the desktop computer, you can do it from there.
Maybe a mobile phone device.
You could probably put a phone number in there and figure out what's going on there.
It just provides a lot of different tools.
Obviously, the more transforms that you have available, the better over here, right?
So obviously if I do more ether scans and other items, then I will have more transforms.
More transforms allows me to pick through more data, and that more data is going to lead me to more
open source intelligence.
Right?
So again, that's maltego.
It provides us a high level overview of open source intelligence gathering.
I personally prefer something called Spider Foot.
Uh, but, you know, Maltego is not a bad tool.
I like the graphical interface that it provides.
And again, you can get through right here, uh, and go through it if you really want.
All right.
So that's maltego in a nutshell.
Very quick, very dirty.
Uh, I hope that was helpful.
We'll see you next time.