nuclei-templates/miscellaneous/dir-listing.yaml

id: dir-listing

info:
  name: Directory listing enabled
  author: _harleo & pentest_swissky
  severity: info

requests:
  - method: GET
    path:
      - "{{BaseURL}}/"
    matchers:
      - type: word
        words:
          - "Directory listing for"
          - "Index of /"
          - "[To Parent Directory]"
          - "Directory: /"
Add dir-listing.yaml Checks whether basic directory listing is enabled at root 2020-04-05 16:19:21 +00:00			`id: dir-listing`

			`info:`
			`name: Directory listing enabled`
updating matcher 2020-10-01 18:40:24 +00:00			`author: _harleo & pentest_swissky`
uniform severity update 2020-08-03 21:52:00 +00:00			`severity: info`
Add dir-listing.yaml Checks whether basic directory listing is enabled at root 2020-04-05 16:19:21 +00:00
			`requests:`
			`- method: GET`
Update syntax 2020-05-25 08:02:27 +00:00			`path:`
Add dir-listing.yaml Checks whether basic directory listing is enabled at root 2020-04-05 16:19:21 +00:00			`- "{{BaseURL}}/"`
			`matchers:`
			`- type: word`
Update syntax 2020-05-25 08:02:27 +00:00			`words:`
updating matcher 2020-10-01 18:40:24 +00:00			`- "Directory listing for"`
updated word matcher 2020-04-09 12:44:55 +00:00			`- "Index of /"`
Update dir-listing.yaml On IIS, there is no "Index of /" but the webpage contains the URL and a link to the parent directory "[To Parent Directory]" when directory listing is enabled. 2020-04-15 08:00:08 +00:00			`- "[To Parent Directory]"`
Update dir-listing.yaml Came across a couple of Jetty based applications with directory listing. 2020-12-13 20:22:24 +00:00			`- "Directory: /"`