Instructor: Now in this lecture, I'd like 2 2
to give you an overview of a tool 3 3
that we're gonna be using often in this course. 4 4
This tool is great for information gathering 5 5
and it allows you to gather information, 6 6
just about anything. 7 7
You can gather information about people, 8 8
you can gather information about websites, 9 9
computers, companies, phone numbers, 10 10
everything really everything you can think of, 11 11
you can add to this tool and try 12 12
to extract information related to that entity. 13 13
The tool is called Maltego, 14 14
and it's gonna become your best friend 15 15
when it comes to information gathering. 16 16
Now, like I said, the tool can be used 17 17
to gather information about anything, 18 18
but using the tool is the same. 19 19
So it doesn't matter, if your target is a website, 20 20
if it's a person, if it's a phone number, if it's a company, 21 21
it doesn't really matter using the tool is exactly the same, 22 22
but only the information 23 23
that you'll be getting is gonna be different. 24 24
So in this lecture, 25 25
we're gonna have a quick overview over this tool, 26 26
and then we're gonna be using it more in the next lectures. 27 27
So first of all, to run the tool, 28 28
just go to the more applications right here, 29 29
and then just type in Maltego. 30 30
And you can see that the tool comes up in here, 31 31
and it's called Maltego CE. 32 32
The first time you're on the tool, you'll be asked 33 33
to log in with a username and a password. 34 34
If you don't have one, you'll have to register 35 35
through the wizard that you'll see. 36 36
So just create a new username and a new password, 37 37
and then they'll send you an activation link to your email, 38 38
activate your account, and then you'll be able 39 39
to log in and use the tool. 40 40
Now as you can see, I've already logged in 41 41
and it's offering me to use one 42 42
of the already made templates for gathering information. 43 43
I'm not gonna use any of that, 44 44
so I'm just gonna click on the cancel right here. 45 45
In here, you can see that we have the homepage for the tool. 46 46
And from here you can add more transformers to the tool. 47 47
Basically transformers are plugins that allow you 48 48
to gather information about specific things. 49 49
So you can literally just click on install on any of these. 50 50
And it will it'll add basically more transformers 51 51
or more things that you can do with Maltego. 52 52
A lot of these extra transformers will ask you 53 53
to log in with a username and a password 54 54
or use a certain API. 55 55
For now we're just gonna use the built-in transformers. 56 56
And I'm just gonna go on right here, 57 57
to create a new graph. 58 58
And this is the main workplace of Maltego. 59 59
So, in the middle, we have our graph, 60 60
so here is where you're gonna be seeing your entities, 61 61
where you're gonna be seeing the information. 62 62
In here, you'll have an overview of the graph, 63 63
and in here, you'll have details 64 64
about each entity in the graph. 65 65
And in here, at the bottom right, you'll be able 66 66
to change the properties for each of these entities. 67 67
All this is empty now, 68 68
and all of this is vague I know for you. 69 69
But once we start using the tool, 70 70
it'll start making sense straight away. 71 71
On the left, we have our entities. 72 72
They're organized and categories right here, 73 73
depending on the type of these entities. 74 74
So for example, if we click on the infrastructure, 75 75
it'll allow you to add a domain name, 76 76
you can add MX records, you can add URLs, 77 77
or you can add the website. 78 78
So you can literally just drag 79 79
and drop the entity that you want. 80 80
And now we have a website in the graph, and from here, 81 81
we can start gathering information about this website. 82 82
There is a lot of different types of entities so, 83 83
you can add a device from here. 84 84
You can for example, if we go to personal, 85 85
you'll see that you can actually just add the person. 86 86
So literally, you can just add the person 87 87
give their first name, their second name, 88 88
and then you'll be able 89 89
to gather information about this person. 90 90
You can also add a phone number again, put the phone number 91 91
and start gathering information about it. 92 92
And one of the really cool categories right here 93 93
is the social links, which will allow you 94 94
to add Facebook entities, it'll allow you add GitHub, 95 95
Foursquare, LinkedIn, Instagram, and other social networks. 96 96
And with that, once you add them, you'll be able 97 97
to gather information about these entities. 98 98
And obviously this information will really help you 99 99
when it comes to trying to exploit 100 100
that person and hack into their system. 101 101
Now once you add the entity in here, 102 102
if we click on the website, for example, 103 103
I'm just gonna go on the property view. 104 104
And you'll see that in here I can modify 105 105
the properties for this website. 106 106
So for example, the first thing that we need 107 107
to change is put the name of our target website in here. 108 108
And once we do that, we can right click 109 109
and select what type of information we want to gather. 110 110
Now, I'm not gonna run any transformers in this video, 111 111
we're gonna do it and next videos. 112 112
For now, I'm just showing you a quick overview 113 113
of the tool, how to add entities how to run transformers, 114 114
and what do we mean by all of these things. 115 115
I know a lot of this is still a bit vague, 116 116
but we're gonna be using this tool a lot in the course 117 117
and it's gonna become very easy for you. 118 118
And as I said, you're gonna be able to use it 119 119
to gather information about anything 120 120
and it's really gonna help you 121 121
enhance your social engineering skills.