Class Central is learner-supported. When you buy through links on our site, we may earn an affiliate commission.

CodeSignal

A05: Security Misconfiguration

via CodeSignal

Go to class Write review

Overview

This course highlights configuration errors—from leftover sample endpoints and directory listing to detailed error messages —that can expose the pastebin application to attackers.

Syllabus

  • Unit 1: Introduction to Security Misconfiguration
  • Unit 2: Sample Endpoints with Default Admin Credentials
    • Exploiting Default Credentials
    • Secure Admin User Initialization
    • Secure Admin Credentials with Bcrypt
    • Implement JWT Authentication for Admin Panel
    • Secure Admin Access with Middleware
  • Unit 3: Directory Listing Enabled
    • Exploiting Directory Listing Vulnerability
    • Disable Directory Listing Vulnerability
    • Secure File Access Implementation
    • Handle Unauthorized Directory Access
  • Unit 4: Detailed Error Messages Exposed
    • Exploiting Vulnerable Error Handlers
    • Secure Error Logging Practices
    • Switching Environments

Reviews

Start your review of A05: Security Misconfiguration

Go to class

Never Stop Learning.

Get personalized course recommendations, track subjects and courses with reminders, and more.

Sign up for free
Someone learning on their laptop while sitting on the floor.