Hi and welcome back. Now. We are going to cover some of the most popular
online breach data and leaks resources. Throughout
this course. I have mentioned various websites that
allow queries of your targeted data
against breached and leaked content will
we will now Revisited those mentioned sources
with some additional ones.
But first I would like to do it the mystification of these two
terms, breached and leaked data actually, rather
to tell you the difference between a data breach and
a data leak that data breach
is deliberate criminal intrusion, where the end
result is the loss of data, or the data
is acquired by the criminals or hackers in this
context, while leaks are usually unintentional,
public exposure of data, a typical
example of a data leak is when you
Jordan use the like a misconfigured server happened and
millions of customers personal records
were exposed. Okay. Now
that we know the difference between those two, we can browse
through a few resources first
and the most popular one out. There is
the site. Have I been pawned diet.com? It's
spelled have. I been P. WN
e. D.com this
online resource.
Source or website allows you to search by simply entering,
an email address. The result displayed
is a list of breaches. Your email address was
involved in or pawned as they say.
And the second one is one of my favorite and
that is leak Peak.com. It's spelled.
L, EA K PE gay.com,
sitelink big.com allows
you to search by entering an email username
even a password of your interest when
a compromised account is found in a breach and if
that account has a password attached to itself, leak
pick will show the first few characters of that
password. The rest of the plate, password characters
are hidden with little star signs.
So there is
Also on API versus paid version. I
will not recommend on paying for you
to access this data because it was probably acquired
by hackers and it is a gray area in the legal and
ethical sense of at best. But
that is my personal opinion and a suggestion for
you.
After leak Peak, I will mention.
Intel x dot IO or intelligence X
as the name suggests. I haven't
had much experience with this side, but it's very popular.
But from what I have investigated on
it.
It is worth mentioning and good for you to
know about it.
After intellects, I will mention goes
project dot f r. This
is one of the sides when I first visited was filling
was I got a feeling up doing something
really shady. And the reason to that is that
they clearly state that their database of
41. GB dump was found
on an underground Community
Forum in December 2017.
According to them, they
One point four billion clear text credentials discovered
in one single database. There
is also a paid option to unlock all
the passwords. So please be careful with that.
Then this is one of the services I have mentioned
earlier in the course. And for some reason, I had better little
luck with it. It's called The hashed.com. They
also have their own breach database from which they
give you the results if available, of course, a
cool thing is that you can utilize regex in
the surges, almost like you can search for anything here.
So I really encourage you to First, Google regex and
learn about it. How to use it in a search contacts.
And now foresees, the domain example, we
leaked info.com, this
site was a good resource that it also in community used
go and try to visit this and you
will see I have put this on the list just for you
to understand the seriousness of this kind of sites and
data you are after.
And the two less bullets are just another suggestions. A
search engine approach with Dorking and the advanced
search operators on
a more shady like approach with the darknet access,
but this is just for you to be aware of.
And now the bonus I have promised. You earlier tour.
I think we have to mention this concept or
framework because it is the essential part of all the
things we have discussed in this section from the internet structure,
to the breach data resources.