Information Gathering With Maltego

15,018 views
14,699 views

Published on

Brief high level presentation on Maltego given to the NEO InfoSec Forum in October 2008.

Published in: Technology
1 Comment
9 Likes
Statistics
Notes
No Downloads
Views
Total views
15,018
On SlideShare
0
From Embeds
0
Number of Embeds
51
Actions
Shares
0
Downloads
0
Comments
1
Likes
9
Embeds 0
No embeds

No notes for slide

Information Gathering With Maltego

  1. 1. Information Gathering with Maltego Tom Eston Information Security Forum October 2008
  2. 2. What is Maltego? <ul><li>Data mining and information gathering tool </li></ul><ul><li>Identify key relationships between information and find unknown relationships </li></ul><ul><li>Uses “transforms” </li></ul>
  3. 3. What does Maltego do? <ul><li>Helps determine real world links between… </li></ul><ul><ul><li>People </li></ul></ul><ul><ul><li>Social Networks </li></ul></ul><ul><ul><li>Companies/Organizations </li></ul></ul><ul><ul><li>Web sites </li></ul></ul><ul><ul><li>Internet Infrastructure (DNS, Domains, Netblocks) </li></ul></ul><ul><ul><li>Phrases </li></ul></ul><ul><ul><li>Documents and files </li></ul></ul>
  4. 4. How does it work?
  5. 5. Maltego Transforms
  6. 6. What is logged? <ul><li>API key </li></ul><ul><li>IP Address (yours) </li></ul><ul><li>The transform executed </li></ul><ul><li>The time it executed </li></ul><ul><li>Your user ID (which gives first name, last name and email address) </li></ul><ul><li>The questions asked or the results are NOT logged </li></ul><ul><ul><li>Except for a few transforms that use web services… </li></ul></ul>
  7. 7. What can it do for you? <ul><li>Information gathering phase of all security related work </li></ul><ul><ul><li>Assessments </li></ul></ul><ul><ul><li>Investigations </li></ul></ul><ul><ul><li>Public information about a company or person </li></ul></ul><ul><li>Saves time </li></ul><ul><li>Easier to use then Google “hacking” </li></ul><ul><li>Hits more then just Google! </li></ul>
  8. 8. Where to get it? <ul><li>Community edition </li></ul><ul><ul><li>Download via paterva.com also found on Backtrack 3 </li></ul></ul><ul><ul><li>No saving, limited to 75 transforms, etc… </li></ul></ul><ul><li>Full version has no limitations </li></ul><ul><ul><li>$430 per year </li></ul></ul><ul><li>Runs on Linux, OS X, Windows </li></ul><ul><li>http://www.paterva.com/maltego/ </li></ul>
  9. 9. More Information <ul><li>Room362.com </li></ul><ul><ul><li>Maltego 2 and beyond http://www.room362.com/archives/225-Maltego-2-and-beyond-Part-1.html </li></ul></ul><ul><li>EthicalHacker.net </li></ul><ul><ul><li>Chris Gates Maltego Series http://www.ethicalhacker.net/content/view/202/1/ </li></ul></ul>
  10. 10. Demo…

×