The Web Application Hacker’s Handbook Discovering and Exploiting Security Flaws

then access the application pages that contain sensitive data. Review the

files that have appeared in the cache to see if any of these contain sensi-

tive data. If a large number of files are being generated, you can take a

specific string from a page’s source, and search the cache for that string.

■

The default cache locations for common browsers are:

■

Internet Explorer

: Subdirectories of 

C:\Documents and Settings\

{username}\Local Settings\Temporary Internet Files\

Content.IE5

Note that in Windows Explorer, to view this folder you need to enter this

exact path and have hidden folders showing, or browse to the above

folder from the command line.

■

Firefox (on Windows)

:  

C:\Documents and Settings\

{username}\Local Settings\Application Data\Mozilla\

Firefox\Profiles\{profile name}\Cache

■