mirror of
https://github.com/0x5t4l1n/hunting.git
synced 2026-05-26 19:36:33 +00:00
copilot-swe-agent[bot]
ab9c127df3
Co-authored-by: Stalin-143 <161853795+Stalin-143@users.noreply.github.com>
16 lines
637 B
Markdown
16 lines
637 B
Markdown
# A05 - Security Misconfiguration
|
|
|
|
## Description
|
|
Security misconfiguration is the most commonly seen issue. This is commonly a result of insecure default configurations, incomplete or ad hoc configurations, open cloud storage, misconfigured HTTP headers, and verbose error messages containing sensitive information.
|
|
|
|
## Common Vulnerabilities
|
|
- Default credentials
|
|
- Unnecessary features enabled
|
|
- Missing security headers
|
|
- Verbose error messages
|
|
- Outdated software
|
|
- Directory listing enabled
|
|
|
|
## Testing Approach
|
|
Check for default configurations, analyze HTTP headers, test for information disclosure, and verify security settings.
|