Skip to content
SelfSec
Join the launch listLaunch list
SelfSec
Vulnerability field guide

Information Disclosure

A stack trace, a forgotten .git directory or a version banner rarely breaks anything alone. Here is how verbose errors, deployment leftovers and leaked internals hand attackers a map, how those leaks chain into real compromise, and how to keep diagnostics on the server.

3 articles 20 min total Overview to advanced techniques

Start with the overview

Information Disclosure8 min read

Information Disclosure, Explained: How Stack Traces, Stray Files and Banners Map Your Server

A stack trace, a forgotten .git directory or a version banner rarely breaks anything alone. Here is how verbose errors, deployment leftovers and leaked internals hand attackers a map, how those leaks chain into real compromise, and how to keep diagnostics on the server.

Read the overview

Information Disclosure techniques

2 focused deep-dives
  1. 02 Debug ModeDebug Mode in Production: Consoles, Profilers and Dev Servers on the Open Internet 6 min
  2. 03 Exposed SecretsExposed Secrets in JavaScript: Bundles and Source Maps Publish Your Keys 6 min