qeeqbox / directory-listing

A threat actor may list files on a misconfigured server

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

A threat actor may list files on a misconfigured server.

Example #1

  1. Threat actor scans server for "index of"
  2. Threat actor finds misconfigured server and scrapes some sensitive data

Impact

High

Risk

  • Data theft

Redemption

  • Deactivate directory listing

ID

f51859e9-1f29-4224-accd-976ab70e81c1

References

About

A threat actor may list files on a misconfigured server

License:GNU Affero General Public License v3.0