> For the complete documentation index, see [llms.txt](https://hackzzz.gitbook.io/welcome/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://hackzzz.gitbook.io/welcome/welcome/writeups/portswigger/information-disclosure.md).

# Information Disclosure

## Intro

**Information disclosure**, also known as information leakage, is when a website unintentionally **reveals sensitive information to its users.** 

Depending on the context, websites may **leak all kinds of information to a potential attacker like:**

* Data about other users, such as usernames or financial information
* Sensitive commercial or business data
* Technical details about the website and its infrastructure

### Information Disclosure Examples

* Revealing the names of **hidden directories**, their structure, and their contents via a `robots.txt` file or directory listing
* Providing access to source code files via temporary backups
* Explicitly mentioning database table or column names in error messages
* Unnecessarily exposing highly sensitive information, such as credit card details