May 21, 2012, 04:36:38 am
Maltego Forum

+ Maltego Forum » General » General Discussions
+ How can I obtain PTTAS?
Username
Password

Pages: [1]
« previous next »
Print
Author Topic: How can I obtain PTTAS?  (Read 21267 times)
anthonation
Newbie
*
Posts: 3
« on: August 28, 2008, 09:52:31 pm »
Hi all,

How can I obtain it as I am referred by Offensive Security for PTTAS after attending to their course? However, I found no response and you guys should be very busy, however, could you do me a favor?

Regards,
Anthony Lai
Logged
RT
Administrator
Jr. Member
*****
Posts: 78
« Reply #1 on: August 29, 2008, 02:42:40 am »
Anthony,

I must admit - us not replying sucks a lot. I''ll ask Andrew and put on my angry eyes. Now - about the PTTAS - we have been getting many requests about it and to be totally honest - we''re not sure how to handle it. "We''ve created a monster!!".

As a start - we cannot put this TAS with the CTAS (e.g. with the other public TAS) because it does things like portscans, vuln scans etc and it would originate from our IP. Besides that, *you* wouldnt want your scans to originate from a box that''s also running scans for who-knows-who.

We do sell standalone TAS servers....but they are expensive. We sell these to organizations that want to perform the normal set of searches, but want to have their search information very private - think sensitive searches. Also - for these customers we provide custom functionality on their servers. But in terms of quickly ''checking out PTTAS'' - it''s hardly what you want - it''s a lot of money (12K USD). Standalone servers are for serious customers that know what they want.

So, how do we make this functionality availble to a broader audience?

We have had fleeting thoughts about letting a potential customer get a server from Linode (www.linode.com). They sign for it - it''s their machine - if they run something exotic from it it is their responsibility. Our TAS can run from Linodes (in fact, we run our servers from there). The setup per server is the same - e.g. we know what we are dealing with and dont need to get our software working under some diesel-generated pre apartheid Linux distro. We set up the TAS and related software on it, and ask a fee per month to maintain the server and to keep the transforms fresh. It seems like something that can work. But - we need root on the box...and it somehow defies the purpose of keeping searches private. But perhaps this is less of an issue than we think it is (we don''t log questions and answers anyhow).

This means you have 2 choices of owning a server - your very own one in your very own network (expensive) or a hosted one that you ''rent'' (less expensive and more flexible).

We have been meaning to get the word out on this idea, but alas, time is our enemy. We havent thought this through properly and ''reserve the right to change our minds''.

What''s your thoughts on it? Do you think it could work? Also - I am putting this on the forum so that I can get some feedback from other members too - so - let us know!

Regards,
RT
Logged
RT
Administrator
Jr. Member
*****
Posts: 78
« Reply #2 on: September 19, 2008, 04:55:38 am »
We have now put this on the web site at http://www.paterva.com/maltego/maltego-server/
RT
Logged
anthonation
Newbie
*
Posts: 3
« Reply #3 on: October 02, 2008, 09:47:05 pm »
It is now included in the Maltego Server  :-o?
Is it possible to grant me a 5-7 days trial for me to demonstrate to my management in next week?
Logged
anthonation
Newbie
*
Posts: 3
« Reply #4 on: October 02, 2008, 09:51:47 pm »
In fact, I took Backtrack 3 training from Offensive Security at Blackhat. Meanwhile, I will present a Pentest session in Microsoft TechEd on 8 Oct (Day 1).
http://www.microsoft.com/hk/technet/teched2008/agenda.aspx

I don''t know whether I could promote it to people for you to do kinds of online demonstration. At the same time, I will demo it in my company.

Regards,
Anthony
Logged
RT
Administrator
Jr. Member
*****
Posts: 78
« Reply #5 on: October 04, 2008, 03:05:01 pm »
Anthony,

Let me PM you on this...
RT
Logged
natron
Newbie
*
Posts: 2
« Reply #6 on: October 08, 2008, 01:02:16 pm »
Is there any possibility of selling the PTTAS transforms as an add-on which we can host on our own equipment?  Something like the Nessus license whereby we pay for updates to the transforms but run them ourselves.  Or, if it''s too difficult to replicate your TAS setup without handing out all of the infrastructure, would you consider open sourcing those transforms?  We can port them to pyMaltego, I''m sure.

This would seem to make sense / be possible for all of the types of transforms that don''t ping public databases, but interact directly with the target host.  It would make it easy to use and develop transforms like the next-hop SNMP transform discussed in the "Getting started with writing transforms" thread.

Regards,
N
Logged
AndrewMacPherson
Administrator
Full Member
*****
Posts: 132
« Reply #7 on: October 09, 2008, 07:18:12 am »
Hi Natron,

We have offered an additional server package whereby you can host your own server on your own equipment, for information on this you can see http://www.paterva.com/maltego/maltego-server/pricing/tas-server-yearly-model/

This will allow you to purchase the product on a monthly fee hosted on your own machine, and wont require any assistance from us apart from the initial setup.

Hope this answers your question..
Logged
Pages: [1]
Print
« previous next »
Jump to: