Security Test: Directory listing¶

Description¶

Default Severity: low

Directory listing happens when an attacker can view all the files in a directory on your server because the proper access restrictions aren't in place. This is dangerous because it can reveal sensitive files, internal configurations, or even credentials, giving attackers a map of where important or vulnerable resources might be hiding. It usually results from default settings or misconfigurations where directory browsing isn't disabled and developers forget to lock down unnecessary directories. If not fixed, attackers might use this information to plan further attacks, making it easier to compromise your system.

Configuration¶

Identifier: configuration/directory_listing

Examples¶

All configuration available:

checks:
  configuration/directory_listing:
    skip: false # default

Compliance and Standards¶