Kali Linux Tutorials
Matano : The Open-Source Security Lake Platform For AWS

Matano is an open source security lake platform for AWS. It lets you ingest petabytes of security and log data from various sources, store and query them in an open Apache Iceberg data lake, and create Python detections as code for realtime alerting. Matano is fully serverless and designed specifically for AWS and focuses on enabling high scale, low cost, and zero-ops. Matano deploys fully into your AWS account.
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgU05Y1sofHm4ZapIXnFhRj-j0gdBgk8ANPrpfwpzHgfvUMzx6mLe92PRiAm2CXGqX3ZDrBepHrNPyWXiHkEnW5Ywn81OHVnx3OIrqxuJ2tF8FCMExPFCVoBLWAZBuCU8tyBjWkCzOuB2fRizEE_JNDxfEPPdSfwL-4j3CCI8bHFYGoRk_RRlpwngeX/s1343/Matano.png FeaturesCollect data from all your sourcesMatano lets you collect log data from sources using S3 or SQS based ingestion. Ingest, transform, normalize log dataMatano normalizes and transforms your data using Vector Remap Language (VRL). Matano works with the Elastic Common Schema (ECS) by default and you can define your own schema. Store data in S3 object storageLog data is always stored in S3 object storage, for cost effective, long term, durable storage. Apache Iceberg Data lakeAll data is ingested into an Apache Iceberg based data lake, allowing you to perform ACID transactions, time travel, and more on all your log data. Apache Iceberg is an open table format, so you always own your own data, with no vendor lock-in. ServerlessMatano is a fully serverless platform, designed for zero-ops and unlimited elastic horizontal scaling. Detections as codeWrite Python detections to implement realtime alerting on your log data. InstallingView the complete installation instructions.

You can install the matano CLI to deploy Matano into your AWS account, and manage your Matano deployment. Requirements* Docker InstallationMatano provides a nightly release with the latest prebuilt files to install the Matano CLI on GitHub. You can download and execute these files to install Matano.

For example, to install the Matano CLI for Linux, run:
curl -OL https://github.com/matanolabs/matano/releases/download/nightly/matano-linux-x64.sh
chmod +x matano-linux-x64.sh
sudo ./matano-linux-x64.sh Getting startedRead the complete docs on getting started. DeploymentTo get started with Matano, run the matano initcommand. Make sure you have AWS credentials in your environment (or in an AWS CLI profile).

The interactive CLI wizard will walk you through getting started by generating an initial Matano directory for you, initializing your AWS account, and deploying Matano into your AWS account.
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgmnPfIoDf8zG5akIJCPrLq1fazXG-89V_K2uVL2GZ0-DTx9eUCb0SMGLne432tXp0gexAFzzuouhXWK8GBKafJwHIdV7V30fxawzPjGIo4qYncZr6lv1nO8FeaPlv0N69X_Meb1K4W02wzgwlRuTXbfi0B1CvP0ispb1XRo_I_An3uAqRGUZNDD26c/s1770/Matano1.gif Click Here To Download

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Little capture the flag

Hi all,

I've created a simple capture the flag platform. You can register for free, and have fun playing/hacking through different categories like crypto, coding, reverse engineering and much more...

​

New challenges gonna be released every month and some new features are also on the todo list (badge system, etc...)

You can regist here: https://ctf.securityvalley.org

​

Have fun playing :-)

submitted by /u/docaicdev
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Openbullet Anomaly 1.4.4

Link for the tool for education purposes: https*://gofile.*io/d/*WotH4T (Remove * characters from the link), best to open on a VM since it's not my upload.

submitted by /u/Harrisonpeers
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
How long to crack wpa2 default passwords?

How long does it take some of you to crack a default wpa2 handshake? Is this still the fastest way to gain access to a wpa2 network?

submitted by /u/Frequent-Durian5986
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
The Crowd Wins Again

by Dwayne Phillips

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Finding P1 Vulnerabilities: Tools & Resources

https://cdn-images-1.medium.com/max/969/1*OS3iOk_bSsegMy4bKh5ELw.jpeg
The second, more in-depth part of ‘Finding P1 Vulnerabilities: A Step by Step Guide’.

Continue reading on The Gray Area »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
HTTP request smuggling Explained and Exploited Part 0x2

https://cdn-images-1.medium.com/max/627/1*oFi05GDYqs6rFDj1yKgIHA.png
Hi! My name is Hashar Mujahid, and today we will continue to discuss what HTTP request smuggling vulnerabilities are and how we can…

Continue reading on InfoSec Write-ups »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Wintermute Loses $160 Million in DeFi Hack

https://cdn-images-1.medium.com/max/1200/1*zNmIXkLGVTIuoh0OCVxEQw.png
Wintermute is a cryptocurrency market maker based in the United Kingdom that became the latest victim of decentralized finance (DeFi)…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
PartyLoud - A Simple Tool To Generate Fake Web Browsing And Mitigate Tracking

https://blogger.googleusercontent.com/img/a/AVvXsEgfik1VBgFBYXx3Jijkq7L26Znz8PyZqaUpokPqDSK7smln8HsMyWgynYJX_uHxHcyeDDwSP3pmFRiXxaEu20bDje5OSVyX2k_Kr4MgLhcoe2TvE54OUR0zqF4PSm_vj2UOGVpGnjp3B-2Z8DgmjZdRYe3IO7LfS3aLHYV9Hjkt1ZtbJXNkbvvCSfbOWg=w640-h434 PartyLoud is a highly configurable and straightforward free tool that helps you prevent tracking directly from your linux terminal, no special skills required. Once started, you can forget it is running. It provides several flags; each flag lets you customize your experience and change PartyLoud behaviour according to your needs.
* Simple. 3 files only, no installation required, just clone this repo an you're ready to go.
* Powerful. Thread-based navigation.
* Stealthy. Optimized to emulate user navigation.
* Portable. You can use this script on every unix-based OS.

This project was inspired by noisy.py How It Works 1. URLs and keywords are loaded (either from partyloud.conf and badwords or from user-defined files)
2. If proxy flag has been used, proxy config will be tested
3. For each URL in ULR-list a thread is started, each thread as an user agent associated
4. Each thread will start by sending an HTTP request to the given URL
5. The response if filtered using the keywords in order to prevent 404s and malformed URLs
6. A new URL is choosen from the list generated after filering
7. Current thread sleeps for a random time
8. Actions from 4 to 7 are repeated using the new URL until user send kill signal (CTRL-C or enter key) Features * Configurable urls list and blocklist
* Random DNS Mode : each request is done on a different DNS Server
* Multi-threaded request engine (# of thread are equal to # of urls in partyloud.conf)
* Error recovery mechanism to protect Engines from failures
* Spoofed User Agent prevent from fingerprinting (each engine has a different user agent)
* Dynamic UI Setup Clone the repository: git clone https://github.com/realtho/PartyLoud.gitNavigate to the directory and make the script executable: cd PartyLoud
chmod +x partyloud.shRun 'partyloud': ./partyloud.shUsage Usage: ./partyloud.sh [options...]

-d --dns To stop the script press either enter or CRTL-CFile Specifications In current release there is no input-validation on files.If you find bugs or have suggestions on how to improve this features please help me by opening issues on GitHub IntroIf you don’t have special needs , default config files are just fine to get you started.
Default files are located in:

* badwords
* partyloud.conf
* DNSList

Please note that file name and extension are not important, just content of files matter badwords - Keywords-based blocklistbadwords is a keywords-based blocklist used to filter non-HTML content, images, document and so on.
The default config as been created after several weeks of testing. If you really think you need a custom blocklist, my suggestion is to start by copy and modifying default config according to your needs.
Here are some hints on how to create a great blocklist file:
DO ✅ DONT

Use only ASCII chars Define one-site-only rules Try to keep the rules as general as possible Define case-sensitive rules Prefer relative p[...]

___________________________
@hacking_Attack
@Hacking_Video

ath Place more than one rule per line partyloud.conf - ULR Listpartyloud.conf is a ULR List used as starting point for fake navigation generators.
The goal here is to create a good list of sites containing a lot of URLs.
Aside suggesting you not to use google, youtube and social networks related links, I've really no hints for you.
Note #1 - To work properly the URLs must be well-formed Note #2 - Even if the file contains 1000 lines only 10 are used (first 10, working on randomness) Note #3 - Only one URL per line is allowed DNSList - DNS ListDNSList is a List of DNS used as argument for random DNS feature. Random DNS is not enable by default, so the “default file” is really just a guide line and a test used while developing the function to se if everything was working as expected.
The only suggestion here is to add as much address as possible to increase randomness.
Note #1 - Only one address per line is allowed Download PartyLoud

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Top 1 Debugging Hack That I’m Shocked Nobody Uses

https://cdn-images-1.medium.com/max/2600/0*pIl8UyND_-TF2Ap4
And It Takes 1 Minute to Learn

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Finding P1 Vulnerabilities: Tools & Resources

The second, more in-depth part of ‘Finding P1 Vulnerabilities: A Step by Step Guide’.Continue reading on The Gray Area »
Read more...

Finding P1 Vulnerabilities: Tools & Resources
https://medium.com/the-gray-area/finding-p1-vulnerabilities-tools-resources-32bb2e7a52fb?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

The second, more in-depth part of ‘Finding P1 Vulnerabilities: A Step by Step Guide’.Continue reading on The Gray Area » (https://medium.com/the-gray-area/finding-p1-vulnerabilities-tools-resources-32bb2e7a52fb?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video