Web Security Testing Guide 4.2.1 - Test Network Infrastructure Configuration

Описание: In this video, we focus on Testing Network/Infrastructure Configuration, which is about checking whether the underlying infrastructure that supports the web application has been securely configured.

This includes reviewing:

Open ports and exposed services that shouldn't be publicly accessible
Misconfigured DNS records or forgotten subdomains
Default services, banners, or unnecessary protocols left enabled
Cloud misconfigurations, IP disclosures, or staging systems left open

Even if the application itself is secure, weak infrastructure can expose it to serious threats, from server enumeration to lateral movement or privilege escalation.