Kali Linux Tutorials
LeakDB : Web-Scale NoSQL Idempotent Cloud-Native Big-Data Serverless Plaintext Credential Search

LeakDB is a tool set designed to allow organizations to build and deploy their own internal plaintext “Have I Been Pwned”-like service. The LeakDB tool set can normalize, deduplicate, index, sort, and search leaked data sets on the multi-terabyte-scale, without the need to distribute large files to individual users. Once curated, LeakDB can search terabytes of data in less than a tenth of a second, and the LeakDB server exposes a simple JSON API that can be queried using the command line client or any http client. It can be deployed in a serverless configuration with a BigQuery backend (no indexes), or as an offline/traditional server with indexes.

LeakDB uses a configurable bloom filter to remove duplicate entires, sorts indexes using external parallel quicksort (i.e., memory constrained) with a k-way binary tree merge, and binary tree search to find entries in the index.

Usage

Normalizing Data

The first step is to normalize your data sets, details on how to do this can be found here. Be sure to keep all your normalized files in a single directory. This step is the same for both the serverless and server deployments.

Next you’ll need to decide if you want to setup a traditional server deployment or a serverless deployment, there are benefits and drawbacks to each as described below.

Server Deployment

The server deployment is the cheapest way to setup LeakDB, but you’ll have to compute indexes yourself. The amount of time it takes to compute an index varies depending on the data set and your hardware. LeakDB can sort multiple terabyte data sets on almost any hardware but it could take a very long time. Domain indexes in particular can take a very long time to compute due to the high number of collisions. However, you only have to pay the computational price once. That is to say once-per-data-set, if you’ve already computed an index and want to add additional data you’ll need to re-sort the entire index (you can save bloom filter results, etc. though), so be sure to collect and normalize all your data before computing the index.

Serverless Deployment

The severless deployment generally costs more money to run as the backend is BigQuery. With BigQuery you pay for data storage as well paying per-query; it isn’t particularly expensive unless you start running lots of queries against the data set. It’s also much faster to setup since you don’t have to compute indexes yourself.

Compile From Source

Just run make , files will be put in ./bin. The client, curator, and server are pure Go and should support any valid Go compiler target but you may need to modify the Makefile. The serverless binary is Linux only, since AWS Lambda only supports Linux. The easiest way to compile the Windows binaries is to cross-compile them from a better operating system like Linux or MacOS.

For example:

* make macos
* make linux
* make windows
Download

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Most difficult phone for hackers and law enforcement to get into?

I've heard mixed reviews on lots of types of phones and I'm trying to find one that is safe.

submitted by /u/username_ann
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is Comptia security+, CEH and other certs valid for the UK?

Looking to get my first certification, but they all seem US based. So i'm not sure if that's a valid option for me. The jobs I've seen in the UK want experience and don't mention any certs. What do ya'll think?

Thanks x

submitted by /u/Hellion__
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Bypassing required reviews using GitHub Actions
https://medium.com/cider-sec/bypassing-required-reviews-using-github-actions-6e1b29135cc7?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Not using GitHub Actions? You’re also vulnerable.Continue reading on Cider Security » (https://medium.com/cider-sec/bypassing-required-reviews-using-github-actions-6e1b29135cc7?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

CVE-2021–24563 Unauthenticated Stored XSS [Frontend Uploader <= 1.3.2]
https://medium.com/pentesternepal/cve-2021-24563-unauthenticated-stored-xss-frontend-uploader-1-3-2-8522e0890833?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Greetings, Community!Continue reading on Pentester Nepal » (https://medium.com/pentesternepal/cve-2021-24563-unauthenticated-stored-xss-frontend-uploader-1-3-2-8522e0890833?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Hack The Box Write Up: Monitors

https://cdn-images-1.medium.com/max/730/1*pVkhiKqcPjNtsXcFtwnBOA.png
As promised in my LinkedIn post, this is my detailed write up to one of the recently retired Hack The Box Labs Machine: Monitors. Monitors…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Bitcoin Can’t Be Hacked. Right? RIGHT?!

https://cdn-images-1.medium.com/max/2250/1*EiNBHRrfAkoAZsMYVgZrtA.jpeg
It is said that hacking into cryptocurrencies is nearly impossible.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
The Complete Guide to Phone Malware and How to Protect Yours from the Risk

What is Malware?

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
The Risks of DeFi

There is a very high chance that the first thing that lured you into learning about DeFi was the 200x return on investment within a month…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Lo fácil que pude resultar realizar un ataque a un negocio

https://cdn-images-1.medium.com/max/1614/0*JrBMFTtOVYFh925y
PUBLICADO EN 12 OCTUBRE, 2021POR EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video