Welcome to a video lecture in this lecture we will see on security misconfiguration directory listing
issues.
What is directory listing issue.
If directory listing is dissevered aren't ever Bozer web server.
Our backers might discover an export web server a native place that will result in a directory listing
of some specific application directories.
Such data allows the attacker to gain the information needed without having to exploit anybody's.
In other words directory listing is a web server function that displays a list of all the files when
there is not an index fund such as index or BHP and default that espie in a specific website that actually
cool.
If you are not getting about this bug I am sure.
And of this lecture you will get about this bug.
OK so in this live demonstration.
Amusing but free addition and orderless be broken.
Web project make today too.
So let's open up browser here and are really up and order let's be broken.
Project model day two over here.
If your target is empty.
So in the buff proxy tab of intercept and then visit the page of the application you are testing.
For example the mutually day home page and saw in my burb.
I have already did a lot of testing on all of this p application.
So now what I am going to do is select the target tab.
This def condensed detail information about your target applications and lets you drive the process
of testing for a narrow space.
Choose your target or here I am choosing Motilal the directory.
So our aim is to search all the directories and files in the majority directory.
So right click on the move to the folder and click on Spyder from here click OK.
You will see the spidering is started here.
I demanded a pop of form request to fill the forms fans like luggin from search form etc..
So here I am ignoring the forms.
You can see that in the spider tab.
Number of requests made by transfer request good form you suppose.
If you are using a professional version you will get scanning the report as well.
He can say that we as will define directory listing will now be
Click on in a directory.
Here you say that some of the security information files.
So let me open what type of information we get here.
Copy the warrior
best in browser.
So let me open configure and see
here.
You will see that this file contains the information about database host username password and database
name OK.
Thank you for watching.
See you in next.
Plus.