Is it possible to get a list of files under a directory of a website? How?

前端 未结 6 619
名媛妹妹
名媛妹妹 2021-01-30 12:16

Say I have a website www.abc.com. Under the website directory there is a page secret.html. It can be accessed directly like www.abc.com/secret.html, but there are no pages that

6条回答
  •  陌清茗
    陌清茗 (楼主)
    2021-01-30 13:13

    If you have directory listing disabled in your webserver, then the only way somebody will find it is by guessing or by finding a link to it.

    That said, I've seen hacking scripts attempt to "guess" a whole bunch of these common names. "secret.html" would probably be in such a guess list.

    The more reasonable solution is to restrict access using a username/password via a htaccess file (for apache) or the equivalent setting for whatever webserver you're using.

提交回复
热议问题