nuclei-templates/miscellaneous/dir-listing.yaml

id: dir-listing

info:
  name: Directory listing enabled
  author: _harleo,pentest_swissky
  severity: info
  reference: https://portswigger.net/kb/issues/00600100_directory-listing
  tags: misc,generic

requests:
  - method: GET
    path:
      - "{{BaseURL}}"
    matchers:
      - type: word
        words:
          - "Directory listing for"
          - "Index of /"
          - "[To Parent Directory]"
          - "Directory: /"
Add dir-listing.yaml Checks whether basic directory listing is enabled at root 2020-04-05 16:19:21 +00:00			`id: dir-listing`

			`info:`
			`name: Directory listing enabled`
Updated author names 2021-06-09 12:20:56 +00:00			`author: _harleo,pentest_swissky`
uniform severity update 2020-08-03 21:52:00 +00:00			`severity: info`
Update dir-listing.yaml 2021-09-16 11:57:49 +00:00			`reference: https://portswigger.net/kb/issues/00600100_directory-listing`
Update dir-listing.yaml 2021-08-11 07:59:46 +00:00			`tags: misc,generic`
Add dir-listing.yaml Checks whether basic directory listing is enabled at root 2020-04-05 16:19:21 +00:00
			`requests:`
			`- method: GET`
Update syntax 2020-05-25 08:02:27 +00:00			`path:`
Preparing for request clustering 2021-01-13 07:31:46 +00:00			`- "{{BaseURL}}"`
Add dir-listing.yaml Checks whether basic directory listing is enabled at root 2020-04-05 16:19:21 +00:00			`matchers:`
			`- type: word`
Update syntax 2020-05-25 08:02:27 +00:00			`words:`
updating matcher 2020-10-01 18:40:24 +00:00			`- "Directory listing for"`
updated word matcher 2020-04-09 12:44:55 +00:00			`- "Index of /"`
Update dir-listing.yaml On IIS, there is no "Index of /" but the webpage contains the URL and a link to the parent directory "[To Parent Directory]" when directory listing is enabled. 2020-04-15 08:00:08 +00:00			`- "[To Parent Directory]"`
Update dir-listing.yaml Came across a couple of Jetty based applications with directory listing. 2020-12-13 20:22:24 +00:00			`- "Directory: /"`