There are a couple different methods you will have to employ to find the data
first. Some can be automatically done while others will require a careful
examination of the website.
Run Queries through the Data
First, look for the information disclosure vulnerabilities in the data you
retrieved. These can be found using a scanner, but for others you will need
to run search queries over the data.
If you can, utilize regular expressions as
they can really help to prevent false positives. Don't expect to find
everything, but hopefully you can find the worst stuff. |
