## 🕵️♂️ Maltego Cheatsheet
## 📌 Footprinting and Reconnaissance
| Task | Command |
|---|---|
| Search for domain information | maltego.entity.search('example.com') |
| Extract email addresses | maltego.transform.run('example.com', 'Affiliate - Email Addresses') |
| Discover subdomains | maltego.transform.run('example.com', 'Affiliate - DNS Subdomains') |
| Perform WHOIS lookup | maltego.transform.run('example.com', 'Affiliate - WHOIS') |
## 🛡️ Vulnerability Assessment
| Task | Command |
|---|---|
| Identify open ports and services | maltego.transform.run('example.com', 'Affiliate - NMAP') |
| Check for known vulnerabilities | maltego.transform.run('example.com', 'Affiliate - Vulnerability - CVEs') |
| Perform SSL certificate analysis | maltego.transform.run('example.com', 'Affiliate - SSL Certificate') |
| Enumerate CMS technologies | maltego.transform.run('example.com', 'Affiliate - CMS') |
## 🎭 Social Engineering
| Task | Command |
|---|---|
| Collect social media profiles | maltego.transform.run('John Doe', 'Affiliate - Social Networks') |
| Gather email addresses from online sources | maltego.transform.run('John Doe', 'Affiliate - Email Addresses') |
| Enumerate relationships between individuals | maltego.transform.run('John Doe', 'Affiliate - Relationships') |
## 🌐 Network Mapping and Analysis
| Task | Command |
|---|---|
| Visualize network infrastructure | maltego.transform.run('example.com', 'Affiliate - DNS Nameserver') |
| Enumerate IP addresses associated with domain | maltego.transform.run('example.com', 'Affiliate - DNS Hosts') |
| Discover network devices (SNMP) | maltego.transform.run('example.com', 'Affiliate - SNMP - Interfaces') |
| SNMP on direct IP | maltego.transform.run('192.168.1.1', 'Affiliate - SNMP - Interfaces') |
## ⚔️ Threat Intelligence
| Task | Command |
|---|---|
| Retrieve IP reputation | maltego.transform.run('192.168.1.1', 'Affiliate - IP Reputation') |
| Investigate known malicious domains | maltego.transform.run('example.com', 'Affiliate - Known Malicious Domains') |
| Search for indicators of compromise (IOCs) | maltego.transform.run('example.com', 'Affiliate - IOC Search') |
| Info on threat actors | maltego.transform.run('APT32', 'Affiliate - Threat Actor') |
## 📧 Email Analysis
| Task | Command |
|---|---|
| Extract metadata from headers | maltego.transform.run('john.doe@example.com', 'Affiliate - Email Headers') |
| Perform email reconnaissance | maltego.transform.run('example.com', 'Affiliate - Email Addresses') |
| Investigate communication patterns | maltego.transform.run('john.doe@example.com', 'Affiliate - Email - To/From') |
## 🌍 Web Application Security
| Task | Command |
|---|---|
| Enumerate website technologies | maltego.transform.run('example.com', 'Affiliate - Web Technologies') |
| Discover related websites and domains | maltego.transform.run('example.com', 'Affiliate - Related Domains') |
| Search for public code repositories | maltego.transform.run('example.com', 'Affiliate - Code Repositories') |
## 🏢 Physical Security Assessments
| Task | Command |
|---|---|
| Identify IP geolocation | maltego.transform.run('192.168.1.1', 'Affiliate - Geolocation') |
| Nearby facilities or organizations | maltego.transform.run('123 Main St', 'Affiliate - Nearby Facilities') |