The Web Application Hacker’s Handbook Discovering and Exploiting Security Flaws

Search for the text of any unusual error messages using standard search

engines. You can use various advanced search features to narrow down

your results. For example:

“unable to retrieve” filetype:php

■

Review the search results, looking both for any discussion about the error

message and for any other web sites in which the same message has

appeared. Other applications may produce the same message in a more

verbose context, enabling you to better understand what kind of condi-

tions give rise to the error. Use the search engine cache to retrieve exam-

ples of error messages that no longer appear within the live application.

Continued

Chapter 14 

■

Exploiting Information Disclosure

511

70779c14.qxd:WileyRed  9/14/07  3:14 PM  Page 511

---