To find information disclosure vulnerabilities change the headers

- Change the Accept header to:

- Also trying sending null byte like

GET /%00

If error handling is not done properly, reveals server version information, stack and route information

#bugbounty #bugbountytip