Class Central is learner-supported. When you buy through links on our site, we may earn an affiliate commission.

CodeSignal

A05: Security Misconfiguration

via CodeSignal

Go to class Write review

Overview

This course highlights configuration errors—from leftover sample endpoints and directory listing to detailed error messages—that can expose the pastebin application to attackers.

Syllabus

  • Unit 1: Introduction to Security Misconfiguration
  • Unit 2: Securing Default Credentials
    • Exploiting Default Credentials to Access User Data
    • Secure Admin User Initialization from Environment Variables
    • Secure Admin Authentication with BCrypt and Database
    • Implementing JWT Authentication with Environment Variables
    • Implementing Role-Based Authorization for Admin Endpoints
  • Unit 3: Preventing Directory Listing
    • Exploiting Directory Listing Vulnerabilities
    • Disable Directory Listing Configuration
    • Implementing Secure File Serving with Explicit Access Control
    • Implementing Forbidden Directory Access Error Handler
  • Unit 4: Secure Error Handling
    • Investigating Information Disclosure Through Error Messages
    • Secure Error Handling with Generic Responses and Internal Logging
    • Implementing Secure Environment-Based Error Handling

Reviews

Start your review of A05: Security Misconfiguration

Go to class

Never Stop Learning.

Get personalized course recommendations, track subjects and courses with reminders, and more.

Sign up for free
Someone learning on their laptop while sitting on the floor.