This course will teach you how to perform systematic penetration testing of configuration and deployment management using OWASP principles.

Course Overview
Course Introduction
Scenario Overview
Identifying Administrative Tools
Identifying System Vulnerabilities
Demo: Finding Open Ports
Demo: Scanning Your Target
Demo: Probing the Target
Introduction
Identifying Default Configurations
Conclusion
Reviewing System Configurations
Source Code Comments
Demo: Identifying Default Configurations
Intoduction
Demo: Source Code Comments
Assessing Log Configurations
Demo: Automated Testing
Demo: File Extensions
File Extensions
Manual Testing
Demo: Manual Testing
Introduction
Automated Testing
Conclusion
Demo: Searching for Files
Introduction
Searching for Orphaned Files and Directories
Conclusion
Search for Backup Files
Demo: Searching for Orphaned Files and Directories
Demo: Forced Browsing
Demo: Searching through Source Code
Reviewing Documentation and Alternate Ports
Introduction
Forced Browsing
Conclusion
Conclusion
HTTP Method Overview
Introduction
Demo: Identifying Permitted Methods
Cross-domain Policy Files
Conclusion
Introduction
Associated Threats
Demo: Abusing Cross-domain Policy
Introduction
HSTS Overview
Demo: Validating HSTS
Conclusion
Tools, References, and Resources