0x5t4l1n/hunting
1
0
Fork 0
mirror of https://github.com/0x5t4l1n/hunting.git synced 2026-05-26 11:35:51 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
3feff63b73aaa1e4d278bd116b669b9a077be742
hunting/OWASP-Top-10/A05-Security-Misconfiguration/README.md
T
copilot-swe-agent[bot] ab9c127df3 Add comprehensive OWASP Top 10 directory structure with injection payloads 
Co-authored-by: Stalin-143 <161853795+Stalin-143@users.noreply.github.com>
2026-01-04 18:24:32 +00:00

637 B
Raw Blame History

A05 - Security Misconfiguration

Description

Security misconfiguration is the most commonly seen issue. This is commonly a result of insecure default configurations, incomplete or ad hoc configurations, open cloud storage, misconfigured HTTP headers, and verbose error messages containing sensitive information.

Common Vulnerabilities

  • Default credentials
  • Unnecessary features enabled
  • Missing security headers
  • Verbose error messages
  • Outdated software
  • Directory listing enabled

Testing Approach

Check for default configurations, analyze HTTP headers, test for information disclosure, and verify security settings.

Reference in New Issue View Git Blame Copy Permalink