mirror of
https://github.com/0x5t4l1n/hunting.git
synced 2026-05-26 19:36:33 +00:00
Add comprehensive OWASP Top 10 directory structure with injection payloads
Co-authored-by: Stalin-143 <161853795+Stalin-143@users.noreply.github.com>
This commit is contained in:
@@ -0,0 +1,15 @@
|
||||
# A05 - Security Misconfiguration
|
||||
|
||||
## Description
|
||||
Security misconfiguration is the most commonly seen issue. This is commonly a result of insecure default configurations, incomplete or ad hoc configurations, open cloud storage, misconfigured HTTP headers, and verbose error messages containing sensitive information.
|
||||
|
||||
## Common Vulnerabilities
|
||||
- Default credentials
|
||||
- Unnecessary features enabled
|
||||
- Missing security headers
|
||||
- Verbose error messages
|
||||
- Outdated software
|
||||
- Directory listing enabled
|
||||
|
||||
## Testing Approach
|
||||
Check for default configurations, analyze HTTP headers, test for information disclosure, and verify security settings.
|
||||
Reference in New Issue
Block a user