Successfully reported this slideshow.
We use your LinkedIn profile and activity data to personalize ads and to show you more relevant ads. You can change your ad preferences anytime.

Information Gathering With Maltego

16,315 views

Published on

Brief high level presentation on Maltego given to the NEO InfoSec Forum in October 2008.

Published in: Technology

Information Gathering With Maltego

  1. 1. Information Gathering with Maltego Tom Eston Information Security Forum October 2008
  2. 2. What is Maltego? <ul><li>Data mining and information gathering tool </li></ul><ul><li>Identify key relationships between information and find unknown relationships </li></ul><ul><li>Uses “transforms” </li></ul>
  3. 3. What does Maltego do? <ul><li>Helps determine real world links between… </li></ul><ul><ul><li>People </li></ul></ul><ul><ul><li>Social Networks </li></ul></ul><ul><ul><li>Companies/Organizations </li></ul></ul><ul><ul><li>Web sites </li></ul></ul><ul><ul><li>Internet Infrastructure (DNS, Domains, Netblocks) </li></ul></ul><ul><ul><li>Phrases </li></ul></ul><ul><ul><li>Documents and files </li></ul></ul>
  4. 4. How does it work?
  5. 5. Maltego Transforms
  6. 6. What is logged? <ul><li>API key </li></ul><ul><li>IP Address (yours) </li></ul><ul><li>The transform executed </li></ul><ul><li>The time it executed </li></ul><ul><li>Your user ID (which gives first name, last name and email address) </li></ul><ul><li>The questions asked or the results are NOT logged </li></ul><ul><ul><li>Except for a few transforms that use web services… </li></ul></ul>
  7. 7. What can it do for you? <ul><li>Information gathering phase of all security related work </li></ul><ul><ul><li>Assessments </li></ul></ul><ul><ul><li>Investigations </li></ul></ul><ul><ul><li>Public information about a company or person </li></ul></ul><ul><li>Saves time </li></ul><ul><li>Easier to use then Google “hacking” </li></ul><ul><li>Hits more then just Google! </li></ul>
  8. 8. Where to get it? <ul><li>Community edition </li></ul><ul><ul><li>Download via paterva.com also found on Backtrack 3 </li></ul></ul><ul><ul><li>No saving, limited to 75 transforms, etc… </li></ul></ul><ul><li>Full version has no limitations </li></ul><ul><ul><li>$430 per year </li></ul></ul><ul><li>Runs on Linux, OS X, Windows </li></ul><ul><li>http://www.paterva.com/maltego/ </li></ul>
  9. 9. More Information <ul><li>Room362.com </li></ul><ul><ul><li>Maltego 2 and beyond http://www.room362.com/archives/225-Maltego-2-and-beyond-Part-1.html </li></ul></ul><ul><li>EthicalHacker.net </li></ul><ul><ul><li>Chris Gates Maltego Series http://www.ethicalhacker.net/content/view/202/1/ </li></ul></ul>
  10. 10. Demo…

×