Hands-On Application Penetration Testing with Burp Suite
上QQ阅读APP看书,第一时间看更新

Sensitive information disclosures

The knowledge of an automated scanner to determine if the information is sensitive is usually done with the help of a few keywords and a combination of regex, such as a credit card regex or a phone number regex. Beyond that it, is all human intervention.

The next chapter will cover in detail how we can do manual analysis.