Where to learn more about Maltego and a big thanks…
Last night in my Intermediate Network Security class we did a lab on information gathering as it pertains to Network Security Assessments. We had discussed in the previous week about Web and Newsgroup searches, WHOIS look-ups, BGP and DNS querying along with Web crawling. I usually reference websites like Google, Netcraft, Fixed Orbit and the like to get the students started. Last year I did a demo of Maltego after I had read about it being showcased at one of the cons. At the time the only real pitch I could make was that it did what a lot of separate web sites did all in one workspace. It was all new to me, but I really didn’t learn the full power of Maltego until I started reading articles posts by people like Rob Fuller (Mubix) and Chris Gates (Carnal0wnage).
So I decided this time around I wanted to get the students using Maltego. In that effort I was successful even if it was only for one night. To prepare for the nights lab activity I asked the @SecurityTwits for some help on finding more information about Maltego. Both Mubix and Carnal0wnage stepped forward and shared all that they had. I want to say thanks to both of them and would also like to refer all my students, and anyone else looking for more information about using Maltego, to checkout the following two websites and related articles.
Carnal0wnage – http://carnal0wnage.blogspot.com
Maltego Part I – Intro and Personal Recon
Maltego Part II – Infrastructure Enumeration (links will be updated when posts are published)
Mubix – http://www.room362.com
Maltego 2 and beyond – Part 1
Maltego 2 and beyond – Part 2
Maltego 2 and beyond – Part 3
Maltego 2 and beyond – Part 4 (links will be updated when posts are published)
Maltego 2 and beyond – Part 5 (links will be updated when posts are published)
