Information Disclosure

Overview Information Disclosure may result when internal information is disclosed to the user-agent (browser). These paths can be used in other attacks. Discovery Methodology Attempt to discover if it is possible to cause errors by injecting all input parameters with characters that are reserved in various contexts. Search web page sources (view source) for internal information disclosure. Search for custom administrative pages and administrative consoles such as phpMyAdmin installations. Exploitation Search pages with and without injection. Use the grep feature of Burp-Suite to seach for inappropriate information. Search for known common administrative consoles such as phpMyAdmin installations, Drupal and Wordpress consoles. Videos Warning: Could not reach YouTube via network connection. Failed to embed video. Click here to watch How to grab robots.txt file with CURL Warning: Could not reach YouTube via network connection. Failed to embed video. Click here to watch How to list HTTP Methods with CURL Warning: Could not reach YouTube via network connection. Failed to embed video. Click here to watch How to list HTTP Methods with NMap Warning: Could not reach YouTube via network connection. Failed to embed video. Click here to watch Determine HTTP Methods using Netcat Warning: Could not reach YouTube via network connection. Failed to embed video. Click here to watch How to grab HTTP Server Banners with CURL Warning: Could not reach YouTube via network connection. Failed to embed video. Click here to watch How to grab HTTP Server Banners with NMap Warning: Could not reach YouTube via network connection. Failed to embed video. Click here to watch Determine Server Banners using Netcat, Nikto, and w3af Warning: Could not reach YouTube via network connection. Failed to embed video. Click here to watch Using Nmap to Fingerprint HTTP servers and Web Applications Warning: Could not reach YouTube via network connection. Failed to embed video. Click here to watch Finding Comments and File Metadata using Multiple Techniques Warning: Could not reach YouTube via network connection. Failed to embed video. Click here to watch How to Sweep a Web Site for HTML Comments Warning: Could not reach YouTube via network connection. Failed to embed video. Click here to watch How to Install dirb on Linux Warning: Could not reach YouTube via network connection. Failed to embed video. Click here to watch How to Use dirb to Locate Hidden Directories on a Web Site Warning: Could not reach YouTube via network connection. Failed to embed video. Click here to watch How to Install OWASP DirBuster on Linux Warning: Could not reach YouTube via network connection. Failed to embed video. Click here to watch How to use OWASP DirBuster to Discover Hidden Directories on Web Sites Warning: Could not reach YouTube via network connection. Failed to embed video. Click here to watch How to Create Wordlists from Web Sites using CEWL