Description

This detector identifies web servers that have directory listing enabled, which exposes the contents of directories when no index file is present. This configuration allows attackers to browse server directories and potentially access sensitive files, source code, configuration files, or other resources that should not be publicly accessible.

Detection Strategy

• Makes HTTP requests to target URLs and analyzes the HTML response content

• Parses the response to detect directory listing pages from Apache, Nginx, or IIS web servers

• Reports a vulnerability when the response contains characteristic HTML patterns that indicate an active directory listing page

• Triggers on any URL that returns a directory listing interface, regardless of the specific directory path