Dev and Security Walkthroughs

Using ElasticSearch to Search through Breached Databases Organizations, companies, and governments will have their data stolen multiple times a year by hackers. Notable cases include LinkedIn (2016), Adobe (2013), and Experian (2015). The stolen database will circulate on the internet via dark web, forums, and torrent magnet links. As a missing person investigator, we can use this data to find a persons home address, phone number, password information, birth date, secondary email addresses and more. ElasticSearch can help us store and search billions worth of breach data. ElasticSearch is an open-source, distributed, RESTful, search engine. ES (ElasticSearch) uses JVM and is built on top of Apache Lucene. ES is great for indexing large amounts of data, sifting through a large result set, and analyzing data. In this video I will demostrate how to take breach data, convert it to ES-compliant JSON, import it, and then query for results. In this video I will show you how to ru

February 1, 2021 1. Create package.json in Node.js npm init npm install nodemon --save-dev npm install express 2. Core Node.js Modules Exist Examples include http, https, fs const http = require('http') to import. Nothing needs to be installed since its a core package included with Node.js. 3. Middleware Example const app = express(); app.use('/users', (req, res, next) => { console.log('In another middleware'); // next(); res.send('users'); }); app.use('/', (req, res, next) => { console.log('keep going!'); res.send('hi there!!!').status(200); }); 4. body-parser npm install body-parser --save Save it with --save because we want to have it in production. body-parser gets added and removed in Node.js so its best practice to download it via third party. February 3, 2021 1. Express has a Router function. This can be used to seperate routes. Admin.js File const express = requ