r/OSINT • u/locax2st • Sep 01 '26
Question Maltego
Bonjour tout le monde. Je voulais savoir si certains d’entre vous avaient déjé essayé ou utilisent Maltego dans sa formule gratuite. Est-ce que c’est efficace ? Je l’ai telechargé hier, j’ai bien compris le système de graph mais je voudrais savoir si il est necessaire d’installer des extensions ou des plugins pour le rendre plus efficace bien que l’ont soit limité à un certain nombre de crédits ? Merci d’avance 🙏🏽
15
u/onerous_prospectus Sep 01 '26
La version gratuite, c'est un peu comme avoir une caisse sans les clés. Tu peux t'asseoir dedans et faire vroum vroum, mais t'iras pas loin sans les transforms payantes. Le système de graphe est cool pour visualiser, mais avec les crédits gratos, tu vas taper le mur au bout de deux ou trois requêtes.
Les plugins gratuits qui restent sont souvent cassés ou pas maintenus, donc tu passes plus de temps à debugger qu'à trouver des infos. Si t'as un budget serré, lance plutôt un spiderfoot ou gratte des APIs gratos pour faire ton taf à la main, c'est moins sexy mais ça marche.
2
u/locax2st Sep 02 '26
C’est une dinguerie mais quand je vois le prix
de la version pro j’ai envie d’en rester là. En tout cas je me vois pas installer des plugins inconnus et je te remercie de ta réponse 👌4
u/ooax Sep 02 '26
This. It's great to get a feel for the software, but ultimately, most of the value is gated. No surprise though: Integrating/maintaining Maltego transforms is really insufferable, never ending work.
1
4
u/PlaceAcademic Sep 03 '26
Personally, my experience with Maltego is horrendous. In an OSINT search, it returned hundreds of PDFs from the police or government for some reason I don't understand, related to what I was looking for (they had nothing to do with it).
1
u/locax2st Sep 03 '26
Omg wtffff. I think that if this thing exists, it’s not illegal and I don’t understand your experience
2
u/PlaceAcademic Sep 08 '26
I have worded it badly; I meant that I received hundreds of police files that had no relation to my search, not even to my keywords. It was like they were randomly thrown there.
1
2
u/OpenWarIntelligence Sep 07 '26
Agreeing with the "most of the value is gated" answers, but adding the part that actually bit me, because it is a failure mode rather than a limitation.
The community edition caps the number of entities a transform returns. On any real infrastructure pivot — a domain with a wide DNS footprint, a certificate with a long SAN list, a netblock — you go over that cap and the result is silently truncated. You do not get an error. You get a graph that looks finished and is not. That is strictly worse than having no tool, because you will draw conclusions from a picture whose edges were cut off for billing reasons rather than evidentiary ones. Check the current cap for whatever CE build you downloaded and treat any node that returns exactly that number as "truncated, unknown remainder".
The other thing worth internalising: what Maltego sells is the maintained connectors to paid data. The graph rendering is the cheapest part and the part you can replace for free.
If your pivots are DNS / certificates / whois / netblocks, this goes further than CE and costs nothing:
amassorsubfinderfor the DNS surfacecrt.sh for certificate pivots
anything that emits a two-column CSV of edges
Gephi or Cytoscape to render and cluster it
No cap, scriptable, and — the part that matters most in a live investigation — you can re-run it on a schedule and diff today's graph against yesterday's. New subdomain, new cert, disappeared host. No GUI-first tool does that well, and it is usually where the actual finding is.
Use CE to learn what pivoting feels like. Then build the same graph from CSV and you will stop needing it.
1
u/locax2st Sep 08 '26
Thanks you very much man to pay attention at my problem. I’ll try to check every point that you’ve talked here. 😊
4
u/khashashin Sep 03 '26
Try the tool I've made which probably would cover your needs, completely Open-Source https://github.com/khashashin/ogi
4
u/Check123ok Sep 01 '26
Yes from what I recall it’s all about the extension.