> For the complete documentation index, see [llms.txt](https://oreobiscuit.gitbook.io/introduction/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://oreobiscuit.gitbook.io/introduction/bug-bounty-reports-and-articles/leaks-and-disclosure-pii-api-key-etc.md).

# Leaks & Disclosure (PII, API Key, etc)

{% embed url="<https://blog.stackademic.com/hunting-javascript-file-for-bug-hunters-e8b278a1306a>" %}

{% embed url="<https://medium.com/@realm3ter/analyzing-javascript-files-to-find-bugs-820167476ffe>" %}

{% embed url="<https://medium.com/@Skylinearafat/how-to-look-for-js-files-vulnerability-for-fun-and-profit-78bfdfbd6731>" %}

{% embed url="<https://medium.com/@blackarazi/git-directory-exposed-leads-to-credentials-disclosure-1d1737638279>" %}

{% embed url="<https://kongsec.medium.com/js-for-bug-bounties-2-0-extreme-edition-2024-f167fa48276a>" %}

{% embed url="<https://sechunter.medium.com/js-is-love-%EF%B8%8F-ca393a4849e9>" %}

{% embed url="<https://mo9khu93r.medium.com/25-users-sensitive-information-disclosed-by-waybackurls-744e1628c892>" %}

{% embed url="<https://medium.com/@raia39499/information-disclosure-a4430dd7b8fb>" %}

{% embed url="<https://medium.com/@raia39499/plaintext-storage-of-a-password-lead-to-sensitive-data-leakage-0bffe15444cb>" %}

{% embed url="<https://infosecwriteups.com/this-is-the-easiest-bug-you-can-find-right-now-eb324861c238>" %}

{% embed url="<https://medium.com/@karimelsayed0x1/idor-lead-to-pii-disclosure-121502394277>" %}

{% embed url="<https://cristivlad.medium.com/unauthenticated-massive-pii-leak-d182ad3f7553>" %}

{% embed url="<https://hackerone.com/reports/1072893>" %}

{% embed url="<https://hackerone.com/reports/98247>" %}

{% embed url="<https://hackerone.com/reports/142549>" %}

{% embed url="<https://infosecwriteups.com/information-disclosure-story-of-500-400-bounty-97d3b343f9ad>" %}

{% embed url="<https://infosecwriteups.com/p1-vulnerability-in-60-seconds-85ef93d42b99>" %}

{% embed url="<https://medium.com/@amolverma.246/how-i-found-a-bug-under-3-mins-that-could-risk-the-reputation-of-an-entire-organisation-4b1b9f0762e9>" %}

{% embed url="<https://medium.com/@bobby.S/how-to-find-origin-ip-1f684f459942>" %}

{% embed url="<https://0xk4tedu.medium.com/how-i-can-easily-get-four-p1-at-nasa-using-simple-google-dorking-d4457bec1971>" %}

{% embed url="<https://medium.com/@medusa0xf/how-i-discovered-a-pii-leak-in-a-developer-platform-d2f3e89653ce>" %}