Welcome back.
In this video lecture we will talk about an Adopt an oath that will land a place that is security misconfiguration
secure the misconfiguration love is called Alker.
If a component is susceptible to attack due to an insecure configuration option poorly documented deferred
consideration or poorly documented side effects of often configuration.
This could range from failing to set a useful and good header on a web server to forgetting to disable
the forward platform functionality that could grant administrate to access to an attacker
Lexie's security misconfiguration most important issues may arccos the main cause of security misconfiguration
issues are wrong.
Application logic.
What happened is while they are lapping one of obligation the Web Developer implements some wrong application
logic which result in security mis conversions.
One of the common example is user hide secret pages.
I know you are an example of Abdullah but wants to hide some secret pages from the user's it actually
changed the name of that you wanted so that the user can't we figured out that was the name of that
you are in.
This is how I develop the occasion.
Are the secret pages remain hidden.
But in your mind.
One question may arise what is that trait
that rate is that someone can brute force.
Are in order to find some interesting you are.
And if they are able to find that variants which are hidden that result in some of that misconfiguration
issues as a result in part discloser.
Are you one directory traversal attacks.
That's it in this direction.
Two security misconfiguration.
See you in the next class.