Ep. 4 – Exposed Secrets & Silent Takeovers: How Misconfigurations Open the Door to Attackers

Hacked & Secured: Pentest Exploits & Mitigations

Amin Malekpour에서 제공하는 콘텐츠입니다. 에피소드, 그래픽, 팟캐스트 설명을 포함한 모든 팟캐스트 콘텐츠는 Amin Malekpour 또는 해당 팟캐스트 플랫폼 파트너가 직접 업로드하고 제공합니다. 누군가가 귀하의 허락 없이 귀하의 저작물을 사용하고 있다고 생각되는 경우 여기에 설명된 절차를 따르실 수 있습니다 https://ko.player.fm/legal.

7M ago 21:15

MP3•에피소드 홈

Exposed secrets, overlooked permissions, and credentials hiding in plain sight—each one leading to a critical breach.

In this episode, we break down three real-world pentest findings where a forgotten file, a misconfigured setting, and a leaked credential gave attackers full control. How did they happen? How can you find similar issues? And what can be done to stop them?

Listen now to learn how attackers exploit these mistakes—and how you can prevent them.

Chapters:

00:00 - INTRO

01:00 - FINDING #1 - How a Forgotten File Exposed Private Repositories

06:37 - FINDING #2 - How Misconfigured Permissions Led to Full System Takeover

14:35 - FINDING #3 - The Credentials That Gave Access to a Network Switch

20:31 - OUTRO

Want your pentest discovery featured? Submit your creative findings through the Google Form in the episode description, and we might showcase your finding in an upcoming episode!
🌍 Follow & Connect → LinkedIn, YouTube, Twitter, Instagram
📩 Submit Your Pentest Findings → https://forms.gle/7pPwjdaWnGYpQcA6A
📧 Feedback? Email Us → [email protected]
🔗 Podcast Website → Website Link

챕터

1. INTRO (00:00:00)

2. FINDING #1 - How a Forgotten File Exposed Private Repositories (00:01:00)

3. FINDING #2 - How Misconfigured Permissions Led to Full System Takeover (00:06:37)

4. FINDING #3 - The Credentials That Gave Access to a Network Switch (00:14:35)

5. OUTRO (00:20:31)

13 에피소드

#Tech #Careers #Business #Penetration Testing #Bug Bounty #Ethical Hacking #Web Security #Application Security #Offensive Security #Podcasting Education #Amin Malekpour #DevSecOps #Secure Coding #Security Hardening #Secure Software Development #Security Best Practices #Red Team