March 4th, 2002, 12:05 AM
agreed, it can yield results - but in this case know that can't work because i made the dir structure :) so I am wondering if in this case, where each dir has a seperate set of web pages...
March 3rd, 2002, 11:11 PM
that won't work in this case because it would just take someone to the default page for foo2 I want to know if someone could list all the files in foo3
March 3rd, 2002, 10:59 PM
the os is Red Hat Linux / Apache
March 3rd, 2002, 10:40 PM
Is it possible for an attacker to list the contents of a directory they are in by entering something into the URL?
For example, attacker is doing reconn and is in: