> For the complete documentation index, see [llms.txt](https://pnpt.adot8.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://pnpt.adot8.com/external-pentest-playbook/common-pentest-findings/information-disclosure.md).

# Information Disclosure

## Overview

Information disclosure will come in many different types and rank from **Critical-Low.** A lot of them won't lead to direct exploits but they're definitely things adversaries can put in their back pocket to use later&#x20;

## Example 1

<figure><img src="https://152155081-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FUczSr73L34emqNMDOxDg%2Fuploads%2F1CmNJz9VYwThMddcwakW%2Fimage.png?alt=media&amp;token=3e342461-984e-4647-86b1-398362cf205d" alt=""><figcaption><p>Information disclosure via Calender form. Username enumeration was possible through the error</p></figcaption></figure>

<figure><img src="https://152155081-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FUczSr73L34emqNMDOxDg%2Fuploads%2FNRtxHU9SLRwYIrgehSlm%2Fimage.png?alt=media&amp;token=48aff3c3-3f20-48e6-9d04-d02c94cbf146" alt=""><figcaption><p>Evidence and Remediation</p></figcaption></figure>

## Example 2

{% hint style="info" %}
More for when you're running low on findings and have time to check. Information is information
{% endhint %}

<figure><img src="https://152155081-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FUczSr73L34emqNMDOxDg%2Fuploads%2FiKwvG1yuvgdkKe13VcBG%2Fimage.png?alt=media&amp;token=86e96533-6410-4f80-a60f-1e6fcc2333fd" alt=""><figcaption><p>Information disclosure via web server</p></figcaption></figure>

<figure><img src="https://152155081-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FUczSr73L34emqNMDOxDg%2Fuploads%2FoIQH3PC9THgYsk6spJHr%2Fimage.png?alt=media&amp;token=56c018aa-8e21-47a2-84a0-4864f507b758" alt=""><figcaption><p>Evidence and Remediation</p></figcaption></figure>
