Waraxe IT Security Portal

Panic_Mode · Active user

Acunetix scanner (or other web vulnerability scanners) can show the structure of a site and the files which are saved in each folder.

Is there a more "silent" way to get the files inside a folder of a website, eg. get the directory ww.example.com/images/ or at least list them...?

Is there any server side restrictions for not letting people getting directory's full content or listing it (i guess noone would be happy if someone downloaded his php scripts)?

tnx in advance Very Happy

ToXiC · Moderator

There are no silent ways and acunetix doesnt list directorys.

What acunetix does is indexing through the website and searching for .jpg,.js files lets say that have path for example at http://site.com/imagefolder/bla.jpg so the structure of the site is

site.com
---/imagefolder/

if you have for example an empty index.htm file at /imagefolder/ that directory cannot be listed . but you can say that is exists.

or you can play with the .htaccess file as well

You can create a .htacess file in your directory and add the following parameter in it

IndexIgnore *

or if you want to hide specific extensions
IndexIgnore *.gif *.jpg (this will allow listin of .html and other files beside gif and jpg

Panic_Mode · Active user

Ah I see.

Tnx for the reply.

So there is not a way of listing the contents of directory...

waraxe · Site admin

Panic_Mode · Active user