The Web Application Hacker’s Handbook Discovering and Exploiting Security Flaws

Informative Debug Messages

Some applications generate custom error messages that contain a large

amount of debug information. These are normally implemented to facilitate

debugging during development and testing, and often contain rich detail

about the runtime state of the application. For example:

-------------------------------------------

* * * S E S S I O N * * *

-------------------------------------------

i5agor2n2pw3gp551pszsb55

SessionUser.Sessions App.FEStructure.Sessions

SessionUser.Auth 1

SessionUser.BranchID 103

SessionUser.CompanyID 76

SessionUser.BrokerRef RRadv0

SessionUser.UserID 229