New directory listing template #9714
Open
+90
−0
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Template / PR Information
This PR adds a new template that checks if "directory listing" is enabled on one of the links collected by visiting the BaseURL. The template runs two different HTTP requests: the first one collects links from
src
andhref
attributes on the BaseURL, and the second request checks if a directory listing is present on all path levels in collected links.For example:
If something like
<a href="/wp-content/plugins/foo/css/bar.css">
is found in response, this template checks the following URLs:Why add this template, since already there's the
dir-listing
template?This template differs from dir-listing since it first collects all possible links in the target response body, and tries to follow them dynamically (and not just statically hard-coded in the template).
References:
Template Validation
I've validated this template locally?
Additional Details (leave it blank if not applicable)
Google Query:
intitle:index.of
Matched response data snippet:
Thanks ❤️
This PR has been done during a Twitch Live on Rev3rse Security Channel, special thanks to @Sparrrgh