From aldeid
Jump to navigation Jump to search



Maltego is an open source intelligence and forensics application, enabling to easily gather information about DNS, domains, IP addresses, websites, persons, etc. The information is rendered on a graph, showing the relationships between objects. This is the perfect tool for social engineering.

At the time of this writing, Maltego Community Edition (CE) 3.0 offers following components:

  • Infrastructure
    • Internet Autonomous System (AS)
    • DNS Name
    • Domain Name
    • IPv4 Address
    • Location
    • MX Record
    • NS Record
    • Netblock
    • Website
  • Personal
    • Email Address
    • Person
    • Phone Number
    • Phrase


$ cd /data/src/
$ wget
$ sudo dpkg -i MaltegoCESetup.v3.0.936.deb
Go to to download Maltego under other formats. It is available as Windows installer, rpm, deb, zip and will soon be available for MacOS.

It installs a shortcut in the menu. Depending on your distribution, you will commonly find it under the Internet section (e.g. for Kubuntu: K > Applications > Internet > Paterva Maltego CE).

When you first launch the tool, you will be presented with a wizard to help you finish the installation.

Notice that you will need to register to be able to use Maltego:

Optionally create a symbolic link in your /pentest/ directory:

$ mkdir -p /pentest/enumeration/maltego/
$ ln -s /usr/bin/maltego-ce /pentest/enumeration/maltego/maltego-ce


Global usage

Maltego offers a very intuitive GUI which is commonly split on 3 panels:

  • left: list of objects (domains, persons, ...)
  • center: working space where you drag and drop objects from the left panel
  • right: specific options displayed on click on the objects from the center panel

Right click on an object to display/select the list of all available transforms.

Looking for a person

Domain information

Maltego is able to retrieve relevant information about domains, as you can see on the following picture.

Looking for documents

Considering a domain as entry point, it is possible to look for documents and try to gather meta description. As you can see on the picture, it is possible to gather information about the author, the company, and even a login.

A previous search on email address has enabled to discover a mail address.