Sensitive Data Exposure

Publicado em: 04 Agosto 2020
no canal de: Faisal Fs
583
7

When a webapp accidentally divulges sensitive data, we refer to it as "Sensitive Data Exposure". This is often data directly linked to customers (e.g. names, dates-of-birth, financial information, etc), but could also be more technical information, such as usernames and passwords. At more complex levels this often involves techniques such as a "Man in The Middle Attack", whereby the attacker would force user connections through a device which they control, then take advantage of weak encryption on any transmitted data to gain access to the intercepted information (if the data is even encrypted in the first place...). Of course, many examples are much simpler, and vulnerabilities can be found in web apps which can be exploited without any advanced networking knowledge. Indeed, in some cases, the sensitive data can be found directly on the webserver itself...

The web application in this box contains one such vulnerability. Deploy the machine, then read through the supporting material in the following tasks as the box boots up.


Nesta página do site você pode assistir ao vídeo on-line Sensitive Data Exposure duração hora minuto segundo em boa qualidade , que foi baixado pelo usuário Faisal Fs 04 Agosto 2020, compartilhe o link com seus amigos e conhecidos, no youtube este vídeo já foi visto 583 vezes e gostou 7 espectadores. Boa visualização!