Mastering Kali Linux for Advanced Penetration Testing - Third Edition

Access and authorization

The majority of the exploitations are performed on the access and authorization section of the security controls to gain access to the system and perform unauthorized activities. Some of the specific controls are the following:

• Adding users to access Credential Manager, which will allow the users to create applications as a trusted caller. In return, this account can fetch the credentials of another user on the same system. An example would be Credential Manager, where the user of the system adds his personal information to the Generic Credentials sections, as shown in the following screenshot:

• Logging in through ...