SDT 306 – Testing for Security Misconfiguration

Course Overview

This course explains how software developers and testers can determine if their web applications are vulnerable to A05:2021 Security Misconfiguration, as defined by the Open Web Application Security Project (OWASP).

After completing this course, you will understand how to:

• Identify common vulnerabilities caused by security misconfiguration
• Develop and implement an effective testing strategy to evaluate attack surfaces
• Conduct manual and automated tests against insecure installation processes
• Identify targeted operating systems, web servers, and databases