A variety of security misconfigurations are discussed including information leakage and default files, default settings and lack of web server and platform hardening. Real world examples are also discussed to show the attacks in the wild. Students learn how to test for the security misconfigurations, as well as lock down configurations to ensure that the vulnerabilities are not introduced into web applications.
A hands-on lab is carried out by students to perform a malicious file execution attack for them to understand how the attack is performed so that they know what they are protecting against.