Description
Directory listing of sensitive files occurs when directory listing, if enabled, exposes the complete index of resources within a directory to potential attackers. This can lead to unauthorized access to sensitive files and directories, potentially exposing confidential information or critical system files.
Test for Directory Listing of Sensitive Files Vulnerability with SmartScanner
Donwload FREE!Recommendation
To prevent directory listing of sensitive files:
- Create a default index file (e.g., index.html) within directories to serve as the entry point.
- Disable directory listing in the web server configurations to prevent the exposure of directory contents.
References
Could your website be exposed too?
SmartScanner can check your website for Directory Listing of Sensitive Files and gives you actionable findings to investigate.
Start a free scanRelated Issues
- Directory Listing - Vulnerability
- Microsoft IIS Tilde Directory Enumeration - Vulnerability
- Apache Version Disclosure - Vulnerability
- PHP Version Disclosure - Vulnerability
You might also like:
See something that needs correcting? Let us knowUpdated May 13, 2024