Recon 03

Bookmarked!

This exercise covers directory listing

Free
Tier
Easy
< 1 Hr.
12175
Recon Badge


Objective

For this challenge, your goal is to find a directory with directory listing in the main website for hackycorp.com.

Directory Listing

When accessing a directory on a web server, multiple things can happen:

  • An "index" file is present and it will get returned (the file is not necessarily named index, this can be configured, but most of the time, the file will be named index.html).
  • No "index" file is present and the web server will list the content of the directory. This can obviously leak information.

Indexing directories can be disabled on most web servers. For example, with Apache, you need to use the option: -Indexes.

To find directories, with indexing enabled. You need to browse the source of the HTML pages and look at the directories used to store files. Once you have a list of directories, you can access each of them individually.