Practical Web Penetration Testing

Elevation of privilege – authorization

Threat Description	Threat aimed at gaining privileged access to resources, for gaining unauthorized access to information or to compromise a system.
Threat Target	Network Infrastructure.
Attacker Steps	After getting authenticated into the system, an attacker can upload a remote shell to manipulate the server remotely. If there are any missing configurations or patches, the hacker can take advantage of the flaw and escalate his/her privileges.
Counter-measure	Servers are always scanned for missing patches and configurations as well Monitoring the applications for any suspicious activities
Existing Counter-measure	Intrusion Detection Systems Smart Data Loss Prevention Systems ...