We're going to talk about security mis configuration which is number six on the top 10.
And you're going to realize you've already seen this a couple of times before.
So we only need to do this one video.
We don't have to do two videos on the topic so let's talk about security mis configuration.
Again kind of like number five.
This is just a big catch all.
If you miss configure something in your security then guess what.
That's a security mis configuration.
And there's so many different examples of that.
You can see all of them here an example attack scenarios.
But let's talk about some of these.
Like a default credential on a web page that happens so much you will not believe just today literally
no I just today I was doing a pen test and I came across default credentials on an application.
Those default credentials led to disclosure of sensitive information.
Literally was able to view every single employee and view their employee email addresses their employee
I.D. number their phone number.
There was a lot of sensitive information there that should not have been disclosed but it was because
guess what.
Default username and password.
And we've talked about this before in the earlier videos when we were doing the midcourse Capstone but
this is just something that you see so much.
I see it all the time.
I've seen things like Cisco Cisco on a router and that allowed access into a network.
Right.
So there's a lot of different little things like this where you find an application you should always
be checking for default credentials.
Another one stack traces.
OK.
Error handling.
We've already seen that happen.
If you think about the error handling when we tried the sequel injection we put in that single quote
it through an error your your application should not be throwing errors right.
You should eliminate any sort of stack tracing you should eliminate any sort of default credentials
right.
You.
And it says in here you know unnecessary features are enabled or installed even like applications that
are left behind or you're able to navigate to source code you're able to see files that you shouldn't
be able to see you know like or there's sometimes their applications come with you know certain features
but they're just default features and you're not using all of them but you didn't disable them.
Well maybe those have vulnerabilities in them as well.
And that would be considered a security mis configuration.
So again at the bottom it says software out of date are vulnerable.
Yes that is part of it.
But as it says here using components with known vulnerabilities really falls into number nine.
So we'll talk about that in a little bit.
But again this big catch all where if somebody makes a security mis configuration would you.
Happens all the time then we're going to take advantage of it.
Right.
So it talks here about the preventable measures.
And it really just depends on the certain scenario like you should be using best practices when you're
installing things don't install you know make sure things are not installed on your systems that you
don't need.
You don't have any unnecessary ports open or accounts activated.
You're not using default credentials on your web pages.
You're not allowing for stack traces or more verbose error messaging.
There's a lot of different things out there that you could do but you need to make sure that your security
is intact.
And this one's really hard to do right.
Like it sounds like.
OK.
We've got some things that we can work on that's kind of the whole point of a pen test is to find the
security in this configuration.
So a lot of the things that you're going to uncover are going to be a part of this.
So we've talked about one that we've already seen which is the air handling we did the sequel injection.
Well another one that we've already seen and achieved on our scoreboard is the deprecated interface.
So that is the file upload.
We were not supposed to be able to upload a file and we were able or an excel file.
Right.
Remember was only zip it was only PDA.
Well we uploaded the excel file and that is a complete bypass of this.
That's a great security mis configuration.
If we're able to bypass that.
Right.
So that falls under this bucket as well.
So again another catch all.
But when you are asked in the interview you can talk about these things again the default credentials
the stack traces you know directories or parts of applications left behind unnecessary ports open unnecessary
accounts or privileges or etc. and that should really help you out when you're actually in the interview
process so from here that is it.
We're going to move on to one of my favorites which is cross site scripting so I'll catch you over in
the next video and we start talking about what that is and the different types of cross-eyed scripting.