Thursday, 20 November 2014

Easy Information Gathering with Maltego in Kali Linux

maltego


 Maltego, is an open source intelligence and forensics application. This is a GUI tool so looks different. Maltego is an information gathering tool that allows you to visually see relationships and it focuses on providing a library of transforms for discovery of data from open sources, and visualizing that information in a graph format, suitable for link analysis and data mining. 
Maltego allows you to enumerate network and domain information like  Domain Names, Whois Information, DNS Names, Netblocks, IP Addresses etc 
Maltego also allows you to enumerate People information like:
  • Email addresses associated with a person’s name
  • Web sites associated with a person’s name
  • Phone numbers associated with a person’s name
  • Social groups that are associated with a person’s name
  • Companies and organizations associated with a person’s name etc
 Maltego also allows you to Do simple verification of email addresses, Search blogs for tags and phrases, Identify incoming links for websites, Extract metadata from files from target domains. 
To open graphically go to this menu in your kali linux. 
Application → Kali Linux → Information gathering → DNS Analysis → Maltego
OR  
Open terminal type maltego and hit enter
Screenshot from 2014-05-14 11:35:57
Screenshot from 2014-05-14 11:36:16After loading maltego ,it will ask for the further process so click next.Screenshot from 2014-05-14 11:38:51Because We are using first time maltego so we need to register and then  log in. So click the register here link.Screenshot from 2014-05-14 11:39:13We are new user so we need to register before using this tool. Fill up all details for completing the registration.
After completing your registration go to your mail Id and verify your account by clicking on verification link which is send y maltego.
After verifying your maltego account login with your registered email id and password.Screenshot from 2014-05-14 11:54:45Soon you will see a welcome massage.Screenshot from 2014-05-14 11:54:59Just click on Next.Screenshot from 2014-05-14 11:55:35Click on FinishScreenshot from 2014-05-14 11:56:06Click on cancel we will do it manually.Screenshot from 2014-05-14 11:56:38Click on new icon (see image) for gathering the informationScreenshot from 2014-05-14 11:56:50By clicking left button of mouse drag the domain in Main view.Screenshot from 2014-05-14 11:59:39Double click on domain icon and rename it into your target domain. Here I am taking  google.com as example.Here we are searching for top level domain for our target domain. First right click on domain then
Run Transform → All Transforms → To Domain ( Find other TLDs)Screenshot from 2014-05-15 06:05:16Here we got the result of TLD search.
Now we are to gain more information about these domains. First of all select all domains by dragging left mouse button or you can select one by one press Shift + left click.
After selecting all domains, right click one of them and then
Run Transform → All Transforms → To Website (Quick-Lookup)Screenshot from 2014-05-15 06:06:35Here we are going to search all website which are associate with these domains.
Well here we are just replacing the a website icon I have targetedhttp://www.google.com for more info follow the image. This is not a necessary part but you should learn it.
Here we are going to find the IP address of our target website. Right click on target website then
Run Transform → Resolve to IP → To IP Address (DNS)Screenshot from 2014-05-15 06:10:12Here we got the IP address of our target website and the detail of  where its located.

No comments:

Post a Comment