Sensitive Data Exposure

Pubblicato il: 04 agosto 2020
sul canale di: Faisal Fs

583

When a webapp accidentally divulges sensitive data, we refer to it as "Sensitive Data Exposure". This is often data directly linked to customers (e.g. names, dates-of-birth, financial information, etc), but could also be more technical information, such as usernames and passwords. At more complex levels this often involves techniques such as a "Man in The Middle Attack", whereby the attacker would force user connections through a device which they control, then take advantage of weak encryption on any transmitted data to gain access to the intercepted information (if the data is even encrypted in the first place...). Of course, many examples are much simpler, and vulnerabilities can be found in web apps which can be exploited without any advanced networking knowledge. Indeed, in some cases, the sensitive data can be found directly on the webserver itself...

The web application in this box contains one such vulnerability. Deploy the machine, then read through the supporting material in the following tasks as the box boots up.

In questa pagina del sito puoi guardare il video online Sensitive Data Exposure della durata di ore minuti seconda in buona qualità , che l'utente ha caricato Faisal Fs 04 agosto 2020, condividi il link con amici e conoscenti, su youtube questo video è già stato visto 583 volte e gli è piaciuto 7 spettatori. Buona visione!

3,763