-
March 3rd, 2002, 11:40 PM
#1
Junior Member
directory listing from URL string
Is it possible for an attacker to list the contents of a directory they are in by entering something into the URL?
For example, attacker is doing reconn and is in:
http://www.foobar.com/foo1/foo2/foo3
foo3 is a directory where they are currently looknig at an html page can they enter or append anything to that URL string to list the contents of the directory?
Thanks,
CIADS
Posting Permissions
- You may not post new threads
- You may not post replies
- You may not post attachments
- You may not edit your posts
-
Forum Rules
|
|