mirror of
https://github.com/projectdiscovery/nuclei-templates.git
synced 2026-02-07 19:23:18 +08:00
35 lines
978 B
YAML
35 lines
978 B
YAML
id: dir-listing
|
|
|
|
info:
|
|
name: Directory listing enabled
|
|
author: _harleo,pentest_swissky,hczdmr
|
|
severity: info
|
|
reference:
|
|
- https://portswigger.net/kb/issues/00600100_directory-listing
|
|
metadata:
|
|
max-request: 1
|
|
tags: miscellaneous,misc,generic
|
|
|
|
http:
|
|
- method: GET
|
|
path:
|
|
- "{{BaseURL}}"
|
|
|
|
matchers:
|
|
- type: word
|
|
part: body
|
|
words:
|
|
- "Directory listing for "
|
|
- "Index of /"
|
|
- "[To Parent Directory]"
|
|
- "Directory: /"
|
|
condition: or
|
|
case-insensitive: true
|
|
|
|
- type: regex
|
|
part: body
|
|
regex:
|
|
- '\d{1,2}\/\d{1,2}\/\d{4}\s+\d+:\d+\s+[\sAPM]+(<dir>|\d+)\s+<[Aa]\s+[hH][rR][eE][fF]="\/'
|
|
- '\s+-\s+\/<\/(title|h1)>'
|
|
condition: and
|
|
# digest: 4a0a00473045022054e5cb990af1c8bf73adfe5a7d3a2622462d26b4cf8c3dfa76120da47134ed260221008ef4ca887a7fd81dbf258c15465381095a4a3a16a39ba29806d08d5ba86319a0:922c64590222798bb761d5b6d8e72950 |