Using Maltego to explore threat & vulnerability data

This post outlines SensePost’s approach to turning raw vulnerability scanner outputs into actionable insights by combining their Managed Vulnerability Scanning service with a Python REST API that ingests CVE XML and exploit-db datasets, and Maltego transforms/machines for data correlation and visualization. The team demonstrates workflows to identify hosts with recent critical vulnerabilities, detect where public exploits exist, pivot across shared vulnerabilities and open ports, and visualize client risk based on exploit availability, while noting obfuscated client identifiers, performance considerations, and plans to integrate additional data sources and enhance the API.