Welcome to security Miss configuration session.
In this first part, we will focus on threads analysis.
We will take our time to discuss how
security misconfigurations compromise application security. Then
we will discuss how the system can be harmed.
The impact of successful exploitation, and give
you some insights to identify who may wanted to harm your system
security. Miss configuration is a
very broad category by definition. A Miss configuration
is an incorrect or inappropriate configuration, but
security-wise this incorrect or inappropriate,
Lower systems, resilience increasing the overall security risk.
Things like enable directory, listing Public
Access about system logs or unhandled errors
with overly informative messages fit.
In this category, all of them tend to give attackers
insights about system. Internals, making further exploitation
easier instead of searching
for a zero-day vulnerability. Attackers tend
to take the short path first searching for known issues. This
approach has proved to be
hopeful.
Most applications such as database servers have default accounts
with administrative privileges to allow the initial setup.
Not removing such accounts, leave
the door wide, open two attackers. Sometimes
special pages are used to automate specific tasks,
graphical installers are a good example. They
are intended to be used once and then removed,
but quite often they get deployed along with the application
enable directory listings or
Public Access mobile files. Such as
A system logs or backups are easy to find even
without touching the application.
The most common consequence of security misconfigurations is
the unauthorized access to some system data or functionality, depending
on expose data or functionality nature. Exploitation
may become easier. Occasionally
security misconfigurations, allow attackers to
get control over the system firewall or remote access
misconfigurations are good candidates to make the system
vulnerable.
Finding security misconfigurations can be done without touching
the application. Using a search engine may
be enough to identify expose directories or files such
as system logs or database backups. Non-tech
threat agents such as competitors or activists may
follow this approach to get access to your system details
or business Secrets. Without much effort. You'll
find this table in the last top 10. Pause
the video and take your time to carefully, read it.
In the next part, we will review some security misconfigurations
in our Target application found
in previous sessions while exploiting other vulnerabilities.