Question

Now that you understand the common types of information leaks and how to find them, follow the steps discussed in this chapter to find your first information disclosure:

既然你了解了信息泄漏的常见类型和如何找到它们，请按照本章中讨论的步骤查找您的第一个信息披露：

1. Look for software version numbers and configuration information by using the recon techniques presented in Chapter 5 .
2. Start searching for exposed configuration files, database files, and other sensitive files uploaded to the production server that aren’t protected properly. Techniques you can use include path traversal, scraping the Wayback Machine or paste dump sites, and looking for files in exposed .git directories.
3. Find information in the application’s public files, such as its HTML and JavaScript source code, by grep ping the file with keywords.
4. Consider the impact of the information you find before reporting it, and explore ways to escalate its impact.
5. Draft your first information disclosure report and send it over to the bug bounty program!