Directory Listing Detection
Directory listing allows anyone to browse the file structure of your web server, potentially exposing sensitive files and internal paths.
Why It Matters
When directory listing is enabled, attackers can enumerate all files in a directory, discovering backup files, configuration files, and other sensitive resources that should not be publicly accessible.
How We Check
We request common directory paths and check for 'Index of' patterns and other directory listing signatures in the response.
How to Fix
Disable directory listing in your web server configuration. Apache: add 'Options -Indexes' to .htaccess or httpd.conf. Nginx: ensure 'autoindex on' is not set. IIS: disable directory browsing in the configuration.
Related Security Checks
Check Your Website Now
Run a free security scan to check for Directory Listing Detection issues and 58+ other security vulnerabilities.
Scan Your Website Free