Sensitive Data Exposure

• Explanation of Databases and technologies used by it
• Example of Sensitive Data Exposure on Flat File Database

When webapp accidentally makes sensitive data known

Often techniques used such as
"The man in the middle of attack"

• Attacker takes advantage of weak encryption on any transmitted data.
• sometimes, sensitive data is found directly on webserver itself
  

Database engines uses

• SQL syntax
• or NoSQL

Databases set up on dedicated servers, COMMON TO SEE

• MySQL
• or MariaDB

For small webapps, COMMON TO SEE

• FLAT FILE DATABASE
  ^-> Databases stored as file on computer disk
  ^-> Common format is sqlite database
  ^-> can be accessed with sqlite3 on cli
  sqlite3 commands
  .tables

-> sensitive data exposure happens
-> on Flat-File Database
Because database is stored underneath root directory of the website
(.e a folder that a user can access when they are connected to website)