> For the complete documentation index, see [llms.txt](https://ttp.parzival.sh/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://ttp.parzival.sh/pentesting/web-applications/information-disclosure.md).

# Information Disclosure

> Information disclosure, also known as information leakage, is when a website unintentionally reveals sensitive information to its users. Depending on the context, websites may leak all kinds of information to a potential attacker, including:
>
> * Data about other users, such as usernames or financial information
> * Sensitive commercial or business data
> * Technical details about the website and its infrastructure

### Resources

{% embed url="<https://portswigger.net/web-security/information-disclosure>" %}