Search Results for: footprint

EC-Council’s Cybersecurity Technician Certification 

The C|CT: A Brand-New Cybersecurity Course to Kickstart Your Professional Career Cybersecurity is one of the most vital and fast-growing professions in the world, and there’s good news for those interested in starting a career in this field: EC-Council has launched the Certified Cybersecurity Technician (C|CT), a brand-new entry-level certification course. The C|CT course covers…

The post EC-Council’s Cybersecurity Technician Certification  appeared first on Cybersecurity Exchange.

The 9 API Testing Tools to Watch Out in 2021

The 9 API Testing Tools to Watch Out in 2021

The 9 API Testing Tools to Watch Out in 2021

Ever since the technology and procedure have progressed a lot, organizations or teams prefer to have quicker testing feedbacks. Since we can notice with the shift-left trend to DevOps, Application Programming Interface testing has become a significant and crucial factor on CI/CD. Automated testing efforts can bring extra worth with the right API testing in place, rather than depending on time-consuming User Interface testing only. The interest in API tests has been growing progressively over the last few decades, as per Google Trends.

Why API testing is required?

• Scrutinizing an application at the API level would be catastrophic thus it is better to do it at first

• Main functionalities of the Application Programming Interface can be validated

• Consumes less time than that of Graphical User Interface functional tests

• Testing data is mostly derived as XML or JSON. Thus the procedure, not language dependant

• Can be easily integrated with Graphical User Interface tests

Top 9 API Test Tools to Look Out in 2021

1. Postman

Postman

Postman being originally come to the market as a Chrome plugin, is now expanding its solution with the native version for Windows, Linux, and Mac. It is a great option for API tests for those who do not wish to deal with coding in an IDE (integrated development environment) using a similar language as the software developers. So, whether you are searching for manual or exploratory testing, it is a great choice.

Crucial Features:

  • With the help of this tool, you can create automated tests, you can monitor the API, execute debugging, and run requests
  • Its interface enables users for extracting web API data
  • Supports Continuous Integration/ Continuous Delivery service with Newman
  • Postman allows writing Boolean testing & is not based on the command line
  • Counts built-in collections, tools, & workspaces
  • Supports several formats, counting Swagger and RAML
  • Can be used for both exploratory and automated tests

Official Website-Postman

2. Rest Assured

Rest Assured

It is one of the most popular API tools that facilitate simple tests of REST services. REST Assured is an open-source or free tool and a Java domain-specific language perfectly designed to make the REST test easier. Besides, the newest version has fixed OSGi support-concerned problems. It also provides additional assistance when it comes to making use of Apache Johnzon. Starting with version 4.2.0, this tool requires Java 8 or higher. It is bundled with countless features, allowing users to continue tests without any coding.

Crucial Features:

  • Supports any HTTP technique but has an explicit hold for several kinds of commands like PUT, POST, DELETE, GET, PATCH, OPTIONS, and HEAD & comprises specifying as well as validating e.g. headers, parameters, cookies, and body effortlessly
  • Built-in functionalities make sure that users do not require to perform coding from scratch
  • Users do not require an extensive understanding of HTTP
  • Support BDD Given/ Then / When syntax
  • The sole framework can have a blend of REST tests and User Interface
  • Flawless integration is possible with the Serenity automated framework
  • Provides several authentication mechanisms

Official Website-Rest Assured

3. JMeter

JMeter

Introduced to perform load testing, this tool is now well-liked for functional API tests. Moreover, JMeter 5.4 brings on in Dec 2020 with extra core enhancements and bug fixes. The user experience is also far better than the last versions. The latest release is JMeter 5.2 in Nov 2019. The JMeter has been packed with varied enhancements and features, several bug fixes, and enhanced user experience, like JMESPath extractor, new protocol, JDBC improvements, HTTP Samplers, and StringtoFile.

Crucial Features:

  • JMeter is compatible with dynamic and static resources to test performance.
  • The integration between Jenkins and Apache JMeter enables users to include API tests within Continuous Integration pipelines.
  • Automatically works with CSV files and enables teams to create unique parameter values for tests.
  • It is a very flexible API testing tool and assists in customization as per the tester
  • Supports manifold protocols for an effective test process

Official Website-JMeter

4. Tricentis

It is one of the robust web services test tool giving the edge of the CD feature. Tricentis accelerates test with a script-less, no-code approach for E2E (end to end) automated testing. Tricentis’ 400+ users comprise global names from the Top 500 brands like Whole Foods, ExxonMobil, HBO, BMW, Toyota, Allianz, Deutsche Bank, Starbucks, Lexmark, Orange, Vodafone, A&E, Vantiv, UBS, and Telstra.

Crucial Features:

  • Supports a wide range of protocols counting AMQP, HTTP(s) JMS, TIBCO EMS, SOAP, IBM MQ, Rabbit MQ, NET TCP REST,
  • It integrates into the DevOps and Agile Cycle
  • Best API automated tools which use model-based automated testing that makes script maintenance simple
  • Enables E2E test as API tests could be used amid packaged apps, mobile, cross-browser, etc.

Ofiicial Website-Tricentis

5. SOAP UI

Tricentis

The popular and most widely used tool for API tests in the world, SoapUI enables you to test SOAP and REST APIs with no difficulty — as it has been built especially for API tests. It is a test automation tool for REST and SOAP APIs. SOAP UI acts as a headless functional test tool dedicated to API test and using this tool allows users to get the full source and build the preferred traits besides these capabilities. SoapUI Pro is used by 1000s of renowned companies across the globe, counting: Microsoft, Apple, Cisco, HP, Oracle, eBay, NASA, FedEx, MasterCard, Pfizer, and Intel.

Crucial Features:

  • Fast and Simple Test Creation i.e. drag-and-drop, point-and-click, functionality makes complex tasks (such as working with XML and JSON) easy
  • Robust data-driven test that is load data from databases, excel and files to simulate the way users interact with the APIs
  • Reuse the functional test cases as security scans and load testing in just a few clicks
  • Flawless Integrates with thirteen API management platforms, supports SOAP, REST, IoT, and JMS

Official Website- SoapUI

6. Apigee

Apigee

Google (Apigee) is a cross-cloud Application Programming Interface management platform and powered by Javascript, enabling users for measuring and testing API performance, builds, and supports API using editors such as Swagger. For 5 consecutive times, it is accepted as a Leader in the Gartner Magic Quadrant for Full Lifecycle Application Programming Interface management. Starting from Feb 2019 with the launch of version 4.19.01, it gave users even extra flexibility for managing their APIs with traits such as TLS security, Open API 3.0 support, virtual host management improvements, self-healing with apigee-monit, and more software support. The current 4.19.6.04 announces in April 2020 with slight bug fixes merely.

Crucial Features:

  • Identify performance problems by tracking API traffic, error rates, and response times,
  • Simply generate API proxies from the Open Application Programming Interface Specification and employ them in the cloud
  • On-premises (in a private cloud) or cloud and often using a hybrid deployment model
  • SOC2, HIPAA, PCI, and PII for applications and Application Programming Interfaces
  • Apigee is purpose-built for online business, & the data-rich mobile-driven Application Programming Interfaces and applications that power it
  • Its full lifecycle Application Programming Interface management platform gives the dashboards, visualization tools, and reports to assist measure the data that flows across Application Programming Interfaces in real-time
  • Manages the procedure to design, develop, publish, deploy, version, governance, monitor accessibility, and measure performance

Official Website- Apigee

7. Test Mace

Test Mace

It is one of the modern powerful cross-platform tools that assist to work with an API and generate automated Application Programming Interface tests.

Crucial Features:

  • To create and test complicated scenarios rapidly
  • To Create tests without actual programming
  • CI/CD support
  • Powerful auto-complete trait and highlighting of present functions, variables values, etc.
  • The well-organized human-readable file format and project structure enable you for storing your project in the version control system review and repo testing and scenarios
  • Advanced JavaScript support in the built-in code editor, counting the static analyzer and auto-complete trait
  • Flexibility- Calculated expressions in any text field, even in the headers area or address bar
  • Cloud synchronization

Official Website- Test Mace

8. Assertible

Assertible

This is a well-accepted API testing tool that constantly tests web services and concentrates on reliability and automation. In October 2019, this tool introduced the newest trait called Encrypted variables, which offers a fresh way to store passwords, tokens, and confidential data fields requisite by tests to advance API test security practices. Encrypted variables aren’t merely trivial to use, however, build on the cryptographically sound method for safe storage.

Crucial Features:

  • Supports automation Application Programming Interface tests through every single step of a CI and CD pipeline
  • Supports running Application Programming Interface testing after deployment
  • It can be integrated with some of the other tools like Zapier GitHub, and Slack
  • Support authenticating Hypertext Transfer Protocol (HTTP) reactions with turn-key assertions like JSON Path data integrity checks and JSON Schema validation
  • The synchronize feature allows users to upgrade tests when their specifics change, you don’t have to manually update their tests after adding-up new parameters or modifying the response of the Application Programming Interface.

Official Website: Assertible

9. Swagger

Swagger

It is an API testing tool that enables users to begin their security, performance, and functional test straight from the Open Application Programming Interface Specifications. Swagger tooling & Ready Application Programming Interface platform make it simple to rapidly generate, manage, and implement Application Programming Interface tests in the pipeline. Open Application Programming Interface Spec version 3.0 in March 2019 came with the newest traits Swagger Hub Domains. With this amazing trait, software developers can take commonly used objects, path items, response, and accumulate them in individual files to be referenced amid manifold distinct Application Programming Interface definitions. Such re-usable Domains can be published, shared, and versioned for collaborative feedback amongst big teams.

Crucial Features:

  • Swagger Inspector offers capacities to inspect Application Programming Interface request-responses and ensure they execute as expected
  • Import user’s Application Programming Interface definitions to automatically generate assertions against endpoints, validate schema rules & insert synthetic data into parameters with zero trouble
  • Generate complicated load scenarios for testing the scale and performance of the Application Programming Interface easily
  • Support every kind of services from GraphQL, SOAP to REST,

Official Website: Swagger

What are the advantages of API Testing?

• Advance Testing

With the Application Programming Interface test, once the logic is designed, testing can be built to authenticate the correctness in data and responses. We do not need to wait for several teams to end their work or for complete apps to be built — test cases are isolated plus ready to build straight away.

• Simple Test Maintenance

User Interfaces are continually changing as well as moving around based on how they are accessed — screen orientation, devices, browsers, etc. This forms a nightmare scenario where testing is being continuously rewritten to continue with the real code in production. Application Programming Interface changes are very much controlled and infrequent — sometimes Application Programming Interface definition files such as OpenAPI Spec can aid to make refactoring testing only seconds of work.

• Rapid Time To Resolution

When Application Programming Interface tests fail, we know accurately where our system broke plus where the imperfection can be found. This aids in reducing time triaging bugs between integrations, builds, and even distinct team-members. The isolated, small footprint of an Application Programming Interface testing is perfect for rapid MTTR stats, a worthy KPI for DevOps groups.

• Speed & Coverage of Tests

Three hundred User Interface testing may take 30 hours to execute. Three hundred Application Programming Interface tests could be executed in three minutes. That means you will search for more bugs in lesser time, whilst also being about to fix them straight away.

Final Verdict

Out of the above-mentioned top API test tools, Postman, SoapUI, and Katalon Studio provide free and paid plans. Whilst JMeter, REST-Assured, and others are free or open-source tools that are accessible free of cost.


The 9 API Testing Tools to Watch Out in 2021 was originally published in Dev Genius on Medium, where people are continuing the conversation by highlighting and responding to this story.

Where to hire react programmer and 3 essential skills to look for

Where to hire react programmer and 3 essential skills to look for

Hiring React.js developers for your tech project can be a tough job because it’s one of the most popular JavaScript frameworks in the world. Facebook, Uber, Airbnb, Netflix, PwC, Amazon, Twitter, Udemy, and nearly 9,000 others worldwide use it for web, desktop, and mobile apps. To hire React programmer, you need to challenge the competition, and as you can imagine, the talent pool isn’t infinite. In this article, we will show you where to hire React js developer for your business.

hire react js developer

React js is popular, and it is here to stay

When the latest StackOverflow survey appeared, the statistics were more than clear: React js has conquered the category “Web Frameworks”. React is a high-performance JavaScript framework. Its simple, component-based architecture allows developers to be more productive and code faster. The framework’s minimal API is focused on solving performance issues, enabling lightning-fast rendering speeds with a small overall footprint.

Where to find React js developers for hire

There are many ways to hire React js developers. Some of them are cheaper, others – more efficient. After all, it all depends on the project size and the budget.

Job sites

You can hire React js developers from a job site. When hiring React developers, know that the job seekers who want to work in the office are often eligible to receive better benefits. However, this isn’t always the case when hiring remotely. Remote staff members typically don’t have access to company benefits like healthcare, which is why they’re typically less expensive to hire.

Freelance platforms

Freelance platforms provide a great way to find a large pool of React JS developers at a low cost. Freelancers might not have the same company loyalty as full-time employees, but most will be able to produce results that meet or exceed hiring a full-time employee. Finding a quality freelancer on any of these platforms takes time and effort — make sure you browse all of your options before hiring anyone! When you employ someone, remember they’re working for money — and if they think they’ll get more elsewhere, they’ll leave.

Hire React programmer for an outstaffing agency

Outstaffing agencies are the best of both worlds. They have all the resources of a full-fledge company while cutting down on other expenses that would take a toll on your budget. Their big talent pools, excellent management, and other resources help companies achieve their goals without breaking the bank.

Skills that you should look for when hiring React js developer

  • Ability to work on other Javascript libraries — You have various options when hiring React developers, but what you want is someone with experience in the Javascript ecosystem. That way, they won’t need to spend time and energy learning all of the intricacies of your library — they can dive right in and start delivering value.
  • In-depth knowledge of React Js framework — One of the must-haves for developers is understanding React js concepts. Using JSX, understanding the component lifecycle, and working with the virtual DOM are necessary skills that every good developer should have. These abilities will get you started quickly on your projects.
  • Ability to write good code — React js developers who want to create polished products should be familiar with the Google JavaScript Style Guide so they can follow the correct standard. This will help keep code readable, consistent, and scalable on large projects.

While a React js developer might have the skillset to build a functional prototype, a good React js developer will be able to collect business requirements and turn them into a set of technical specs. Communication skills are important for this, as well as their ability to work in a team. In addition to creativity and the desire to learn, any success in this role will also depend on their problem-solving skills.

In conclusion

It is not an easy task to hire React programmer. Finding a great React js developer takes a lot of time and effort — but you don’t have to work with a remote freelancer or a company, or a person from a different part of the world. A trusted technology partner knows everyone in the development community, so they can help you find your ideal hire.

Certified Ethical Hacker Version 11 | CEHv11 Exam (312-50)

Certified Ethical Hacker Version 11 | CEHv11 Exam (312-50)

Certified Ethical Hacker Version 11 | CEHv11 The Certified Ethical Hacker (CEH) credential is the most trusted ethical hacking certification and accomplishment recommended by employers globally. It is the most desired information security certification and represents one of the fastest-growing cyber credentials required by critical infrastructure and essential service providers. Since the introduction of CEH …

Certified Ethical Hacker Version 11 | CEHv11 Exam (312-50) Read More »

Bringing PRE into Enterprise

Bringing PRE into Enterprise

Written by Adam Pennington and Jen Burns

We’re excited to announce that we’ve released the latest version of MITRE ATT&CK (v8), which includes the integration of PRE-ATT&CK’s scope into Enterprise ATT&CK! This integration removes the PRE-ATT&CK domain from ATT&CK and adds two new tactics to Enterprise — Reconnaissance and Resource Development. Similar to our July release of sub-techniques, this is an update to ATT&CK that’s been under development for some time. You can find this new version of ATT&CK on our website, in the ATT&CK Navigator, as STIX, and via our TAXII server.

PRE-ATT&CK’s History

When we originally launched Enterprise ATT&CK, we focused on the behaviors that adversaries perform after they’ve broken into an environment, roughly the Exploit through Maintain phases of the MITRE Cyber Attack Lifecycle. This aligned well with the visibility of many defenders of their own networks, but it left pre-compromise adversary behaviors uncovered. After ATT&CK’s initial launch, a separate team at MITRE decided to fill in the gap to the left by following the structure of Enterprise ATT&CK and enumerating adversary behaviors leading up to a compromise. This work became PRE-ATT&CK and was released in 2017.

The Original 17 Tactics of PRE-ATT&CK Against the Cyber Attack Lifecycle

Some of you in the ATT&CK community have embraced and leveraged PRE-ATT&CK since that release to describe pre-compromise adversary behavior, but the framework never found the kind of adoption or contributions we’ve seen for Enterprise ATT&CK. We’ve also heard from a number of organizations over the years that Enterprise ATT&CK’s coverage of only post-compromise behaviors held up their ability to adopt it. In response, we started the process of integrating PRE-ATT&CK into Enterprise in 2018. As the first step of that integration, we deprecated PRE-ATT&CK’s Launch and Compromise tactics and incorporated their scope into the Initial Access tactic in Enterprise.

Launch and Compromise Become Initial Access

Finishing the Merger

In my ATT&CKcon 2.0 presentation, I talked about how PRE-ATT&CK + Enterprise ATT&CK covering the complete Cyber Attack Lifecycle/Cyber Kill Chain® is a bit of an understatement. The scope of PRE-ATT&CK actually starts before Recon, with multiple tactics covering pre-reconnaissance intelligence planning. It also includes some behaviors that don’t leave technical footprints or might not have been seen in the wild. In early 2019, MITRE’s Ingrid Parker worked with the ATT&CK team to develop the following criteria for determining which PRE-ATT&CK behaviors could assimilate into Enterprise ATT&CK:

  • Technical — the behavior has something to do with electronics/computers and is not planning or human intelligence gathering.
  • Visible to some defenders — the behavior is visible to a defender somewhere without requiring state-level intelligence capabilities, for example an ISP or a DNS provider.
  • Evidence of adversary use — the behavior is known to have been used “in the wild” by an adversary.

She found that PRE-ATT&CK could be divided into three sections. Based on the criteria, the first section, including PRE-ATT&CK Priority Definition Planning, Priority Definition Direction, and Target Selection tactics as well as a number of other techniques, are out of scope. That left us with two sections that divided quite well into the new tactics we released today:

1. Reconnaissance — focused on an adversary trying to gather information they can use to plan future operations, including techniques that involve adversaries actively or passively gathering information that can be used to support targeting.

2. Resource Development — focused on an adversary trying to establish resources they can use to support operations, including techniques that involve adversaries creating, purchasing, or compromising/stealing resources that can be used to support targeting.

PRE-ATT&CK Divided into Three Sections

Over the course of 2019 and a number of whiteboard sessions, I worked with former ATT&CK team member Katie Nickels to identify the techniques and sub-techniques that fit the three criteria, and covered the scope of the remaining techniques in the Reconnaissance and Resource Development portions of PRE-ATT&CK. This work was largely complete last October, and you might notice that the preview from ATT&CKcon 2.0 is very similar to what we released today. Because Reconnaissance and Resource Development leveraged sub-techniques, the work was suspended until those were implemented in Enterprise ATT&CK with our recent release. With sub-techniques out the door, ATT&CK team members Jamie Williams and Mike Hartley picked up the ball and created the content for the 73 new techniques and sub-techniques.

The PRE Platform

A question that arose during the creation of the Reconnaissance and Resource Development techniques is “What platform should these be?” For example, Gather Victim Identity Information (T1589) isn’t really Windows, macOS, Cloud or any specific existing enterprise platform. In order to reflect the different nature of these new techniques (and as a homage to PRE-ATT&CK), we added techniques in Reconnaissance and Resource Development to a new PRE platform.

Another unique characteristic of these new PRE techniques is their detection. While we scoped techniques to those “visible to some defenders,” most adversary Reconnaissance and Resource Development isn’t observable to the majority of defenders. In many cases, we’ve highlighted the related techniques where there may be an opportunity to detect an adversary. For the subset of techniques that are detectible by a broad set of defenders, we’ve described detections, some of which may require new Data Sources to see.

Detection for Obtain Capabilities: Digital Certificates (T1588.004)

Mitigating Reconnaissance and Resource Development techniques can be challenging or unfeasible, as they take place in a space outside of an enterprise’s defenses and control. We’ve created a new Pre-compromise mitigation to recognize this difficulty, and noted where organizations may be able to minimize the amount and sensitivity of data available to external parties.

While these new techniques don’t typically take place on enterprise systems, are difficult to detect, and potentially impossible to mitigate, it’s still important to consider them. Even without perfect detection of adversary information collection, understanding what and how they’re collecting from Reconnaissance can help us examine our exposure and inform our operational security decisions. Similarly, our sensors may not detect most activity from Resource Development, but the tactic can offer valuable context. Many of the behaviors leave evidence visible to the right open/closed source intelligence gathering or can be discovered through an intelligence sharing relationship with someone who does have visibility.

Going Forward

We’re interested in your feedback on the content we’ve added and your input on any techniques, sub-techniques, detections, and mitigations you think we’ve missed. Do you have a way of detecting a particular Resource Development technique or preventing an adversary from successfully performing Reconnaissance? Please let us know by sending us an email, or contributing what you believe is currently missing.

Finally, if you aren’t ready to make the switch from PRE-ATT&CK, we’re still here for you. PRE-ATT&CK is still available in the previous version of our website, in the v7.2 and earlier versions of our STIX 2.0 content, and by filtering on the prepare stage in a previous version of the ATT&CK Navigator.

©2020 The MITRE Corporation. ALL RIGHTS RESERVED. Approved for public release. Distribution unlimited 20–00841–15.


Bringing PRE into Enterprise was originally published in MITRE ATT&CK® on Medium, where people are continuing the conversation by highlighting and responding to this story.

Maltego — Powerful OSINT Reconnaissance Framework

Maltego — Powerful OSINT Reconnaissance Framework

Maltego is one of the most famous OSINT frameworks for personal and organizational reconnaissance. It is a GUI tool that provides the capability of gathering information on any individuals, by extracting the information that is publicly available on the internet by diffrent methods. Maltego is also capable of enumerating the DNS, brute-forcing the normal DNS and collecting the data from social media in an easily readable format.

How are we going to use the Maltego in our goal-based penetration testing or red teaming exercise? We can utilize this tool in developing a visualization of data that we gathered. The community edition of Maltego comes with Kali Linux.

Maltego Kali Linux

The tasks in Maltego are named as transforms. Transforms come built into the tool and are defined as being scripts of code that execute specific tasks. There are also multiple plugins available in Maltego, such as the SensePost toolset, Shodan, VirusTotal, ThreatMiner, and so on. Maltego offers the user with unprecedented information. Information is leverage. Information is power. Information is Maltego.

What does Maltego do?

Maltego is a program that can be used to determine the relationships and real world links between:

  • People
  • Groups of people (social networks)
  • Companies
  • Organizations
  • Web sites
  • Internet infrastructure such as:
  • Domains
  • DNS names
  • Netblocks
  • IP addresses
  • Phrases
  • Affiliations
  • Documents and files
  • These entities are linked using open source intelligence.
  • Maltego is easy and quick to install – it uses Java, so it runs on Windows, Mac and Linux.
  • Maltego provides you with a graphical interface that makes seeing these relationships instant and accurate – making it possible to see hidden connections.
  • Using the graphical user interface (GUI) you can see relationships easily – even if they are three or four degrees of separation away.
  • Maltego is unique because it uses a powerful, flexible framework that makes customizing possible. As such, Maltego can be adapted to your own, unique requirements.

 What can Maltego do for us?

  • Maltego can be used for the information gathering phase of all security related work. It will save our time and will allow you to work more accurately and smarter.
  • Maltego aids us in your thinking process by visually demonstrating interconnected links between searched items.
  • Maltego provide us with a much more powerful search, giving you smarter results.
  • If access to “hidden” information determines your success, Maltego can help us discover it.

Setting Up Maltego on Kali Linux

The easiest way to access this application is to type maltego in our Terminal, also, we can open it from Kali Linux Application menu.

maltego

After first time we opened Maltego it will show us the product selection page, where we can buy various versions of Maltego, but the community edition of Maltego is free for everyone so we choose it (Maltego CE) and click on run, as shown in the following screenshot:

Selecting Maltego CE Community Edition

After clicking on “RUN”, we will got the configuring Maltego window. Here  we need to login and setup our Maltego for the very first time. First we need to accept the terms and conditions of Maltego as we can see in the following screenshot:

Accept terms and conditions and move next

On the above screenshot we can see that we check ✅ the “Accept” box and click on “Next”.

After that we got a login screen a we can see in the following screenshot:

On the above screenshot we can see that note “LOGIN: Please log in to use the free online version of Maltego.” So, we need to log in here. But before that we need to Register to create our credential. We need to click on “Register”, and register page will open on our browser, or we can click here to go to the same page for register.

Maltego Registration

Here we need to fill up everything then they send activation link on our given mail address. For security reasons we are using temp-mail services, and we got our activation mail and activate it. After activating it we need to login from Maltego.

Maltego sucessfully logged in

Then we just need to click “Next”, “Next”, “Next”, and our Maltego will open in front of us, as we can see in the following screenshot.

Maltego on kali Linux

Running Maltego on Kali Linux

Now we are ready to use Maltego and run the machine, by navigating to “Machines” in the Menu folder and clicking on “Run Machine”; and then, we will be able to start an instance of the Maltego engine. Shown in the following screenshot:

Starting Maltego intence

After that we got a list of available options in Maltego public machines:

Maltego machines list

Usually, when we select Maltego Public Servers, we will have the following machine selections:

  • Company Stalker: To get all email addresses at a domain and then see which one resolves on social networks. It also downloads and extracts metadata of the published documents on the internet.
  • Find Wikipedia edits: This transform looks for the alias from the Wikipedia edits and searches for the same across all social media platforms.
  • Footprint L1: Performs basic footprints of a domain.
  • Footprint L2: Performs medium-level footprints of a domain.
  • Footprint L3: Intense deep dive into a domain, typically used with care since it eats up all the resources.
  • Footprint XXL: This works on the large targets such as a company hosting its own data centers, and tries to obtain the footprint by looking at sender policy framework (SPF) records hoping for netblocks, as well as reverse delegated DNS to their name servers.
  • Person – Email Address: To obtain someone’s email address and see where it’s used on the internet. Input is not a domain, but rather a full email address.
  • URL to Network and Domain Information: This transform will identify the domain information of other TLDs. For example, if we provide www.google.com, it will identify www.google.us, google.co.in, and so on and so forth.

Cybersecurity experts usually begin with “Footprint L1” to get a basic understanding of the domain and it’s potentially available sub-domains and relevant IP addresses. It is quite good to begin with this information as part of information gathering, however, pentesters can also utilize all the other machines as mentioned previously to achieve their goal.

Once the machine is selected, we need to click on “Next” and specify a domain, for example google.com. The following screenshot provides the overview of google.com.

google on maltego
Footprint L1 with Maltego on Google.com

On the top-left side of the above screenshot, we will see the Palette window. In the Palette window, we can choose the entity type for which you want to gather the information. Maltego divides the entities into six groups as follows:

  • Devices such as phone or camera.
  • Infrastructure such as AS, DNS name, domain, IPv4 address, MX record, NS record, netblock, URL, and website.
  • Locations on Earth.
  • Penetration testing such as built with technology.
  • Personal such as alias, document, e-mail address, image, person, phone number, and phrase.
  • Social Network such as Facebook object, Twitter entity, Facebook affiliation, and Twitter affiliation.

If we right-click on the domain name, we will see all of the transforms that can be done to the domain name:

Maltego all transform

  • DNS from domain.
  • Domain owner’s details.
  • E-mail addresses from domain.
  • Files and documents from domain.
  • Other transforms, such as To Person, To Phone numbers, and To Website.
  • All transforms.

If we want to change the domain, you need to save the current graph first. To save the graph, click on the Maltego icon, and then select Save. The graph will be saved in the Maltego graph file format ( .mtgx ).

Saving maltego output

Then to change the domain, just double-click on the existing domain and change the domain name.

maltego against KaliLinuxIn

This is how Maltego works on our Kali Linux system. This is a very strong GUI based information gathering tool which comes loaded with Kali Linux.

Love our articles? Make sure to follow us on Twitter and GitHub, we post article updates there. To join our KaliLinuxIn family, join our Telegram Group. We are trying to build a community for Linux and Cybersecurity. For anything we always happy to help everyone on the comment section. As we know our comment section is always open to everyone. We read each and every comment and we always reply.

Open Whatsapp chat
Whatsapp Us
Chat with us for faster replies.