Greetings and in this short video presentation we're going to see how we go about using multigo to perform a passive reconnaissance, passive reconnaissance is where we use publicly available information to gather information about our potential target. The multigo Community Edition is the community version of multigo. That is available for free after a quick online registration multigo seeeeee includes most of the same functionality as the commercial version, however, it does have some limitations. The main limitation with the community version is that the application cannot be used for commercial purposes. There's also a maximum number of entities that can be displayed at any given time in the community edition of multigo. Lastly, there is no export of the graph information as you have in the full commercial version of multigo.

With multigo, we can find the relationships which people are linked to Including your social profile, mutual friends companies that are related to the information gathered and websites. The first time you start multigo, you'll want to go to applications, you want to go to information gathering, and click on multigo. This places the multigo icon into the Quick Launch Bar. Once multigo opens up, you'll want to go ahead and select them all to see the free edition, click on Run. If this is the first time that you have brand multigo you'll have to register by clicking on the register here link. Clicking on the register here will take you out to the internet where you can register an account so that you have access to the transforms.

Scroll down the page until you come to the register and account window, create your account and then you will be able to download and install all the transforms for multigo. Once you've registered your account, you'll be brought back to the law On window for multigo you can then type in your login information, solve the captcha, and then click Next. Once you've logged in, you'll be presented with the welcome screen for the multigo Community Edition. Go ahead and click Next. This will install or update your transforms. Once your transforms have been updated, you can click Next, you can choose to automatically send error reports or not.

And then you can click Next. And you're now ready to begin your first passive reconnaissance with multigo. We're now ready to go ahead and click on Finish. And this brings up the multigo starting screen. Once you start multigo for the first time, you can go up to the top right, you can close out that first window. And then behind that window is this particular screen for multigo.

And this is the screen we're going to be using. Over here in the right window pane. We have additional transform sets that you can install. Now some of these will require that you go out and register for API key. But some of these are very useful. You can look through them and see if there's anything in here that you might be interested in as far as additional transform, we can go back to our original graph page just by going up here to the menu bar, and clicking on the plus sign.

That brings back that original graph screen that we started with. Over here in the left window pane, we have our transforms. And this is where we can go in and we can start looking for particular information about somebody such as an email address, phone numbers, aliases, documents, a person. There's all kinds of things that you can look up on an individual or an entity such as an organization, and it's all available over here inside of this left window pane. We're going to start off by looking at some domain information. So what we're going to do is over here in the left window pane, just scroll on down until you come to the domain and just drag down on over here to your MP.

Graphed just like that, once we have the domain transform over inside of our graph, we can just double click it. And now we can type in the name of the domain we wish to look up. For this demonstration, I've typed in cyber offense, COMM But it could be any domain name. It could be Microsoft, it could be Cisco, it could be IBM, it could be anybody. As you probably come to realize we could use this application for nefarious purposes. But we don't want to do that.

You don't want to use it for stalking individuals or trying to cause harm. Well, we want to use it for in this case, is to find out about our own personal presence, because we may have some things out there that we don't want people to be able to gather about us. And so I've typed in cyber offense comm now I should be able to get some information about myself, the owner of cyber, cyber offense COMM And we'll just see how much information that does pull up. Once you have your domain name in place, you can just run Click. And from the list, you can click on where it says all transforms. If you click on that plus sign, you'll see all the different transforms or scripts that can be ran against the search.

So as you go through the list, you can see that it can find information about your phone numbers, it can find out information about your email addresses, other domains, files to persons to a phone number, websites, quick lookup, it can do a lot of information gathering. Now to run all those transforms for the domain lookup. I've used this double clicker over here, and if I click on that, it will begin the passive recon against cyber offense Comm. So as the information is gathered and the nodes are brought in, as information about my domains gathered, you'll see that the graph starts to fill up rather quickly, and I run out of space. by just using my left mouse button, I can click inside of the graph and then use my scroll bar. To zoom in, or zoom out.

So there's a lot of information in here you see I got some DNS records. And if I click on that, you can go over here to the detail view, you can open up the relationship and see if there's anything incoming, you can look at that. You can also look at some other information that might be available. I'm pretty boring. As far as having anything going on with my domain name. It's real simple.

It's just registered for business purposes only. So there's not a lot of information going on in here. But you could find out some things about the relationships, which I don't have any and the generator details and some other things. So the good news is, I don't see my name being listed anywhere underneath a domain search, and that's a good thing. You can't find my phone number and I didn't show up. It also didn't find my actual given name.

That's a good thing. So I've done a pretty good job of making sure that my privacy is kept intact. And that's another good use for multigo. Let's go ahead and change direction and do some information gathering about a individual. So we're going to look up a person, and we're going to see what we can find out about that individual. Let's go ahead and start a new graph.

We're going to go up here to the plus sign, we're going to open up a new graph. Now you'll see that we have two graphs. And there's our new graph. Now we have both graphs here. So I'm going to scroll here to the second graph. I'm just going to drag person on over here.

And we can just type in anybody's name. Okay, anybody name you want to type type into there, you can type it in. And we can do a search and see what information we can find out about that individual on the internet. From the Lab file, I'm just going to type in Shane Watson, and we're going to do a search for change to what we can find out about him. So this individual could be anybody. It could be yourself.

It could be your spouse, it could be your girlfriend, it could be who whomever ever again, you make sure that you think about what you're doing before you go out and use this for a serious purposes, I'm going to go ahead and just use this fictitious individual called Wayne, Watson. I'm going to right click, and I'm going to do the all transforms again. And I'm just going to click on that and go ahead and run that. You want to open a service manager to sign in. I don't want to look up Twitter, so I don't have a Twitter account. But if you have a Twitter account, you can.

I'm gonna say no. So let's go ahead and let those transforms run for a couple of minutes and see what pops up. Again, I have clicked inside of my graph window and I'm using my scroll bar to either bring it out or push it back in so I can see all the details. Alright, so we see we got a lot of information here or we got some information of some entities that belong to Shane Watson. These are different email addresses. So if you want to know how to get ahold of somebody, and you can't figure it out, you could use multigo to go out there.

Get an email address on that individual. So you see, there's a lot of different things that we can use this for good, bad or otherwise. So that's going to conclude this short video presentation on how we go about using multigo. Again, this is the Community Edition so it is limited, but it has most of the functionalities as a full version. If you have any questions or you have concerns, please do not hesitate to reach out and contact your instructor and I'll see you in my next video.