Directory Listing Enabled

Low Severity Technical Guide

Vulnerability Description

Directory listing (or directory browsing) is a web server misconfiguration that displays the index of files in a directory when no default index file (like index.html) is present. This exposes source code, backup archives, configuration files, and private assets to public download and enumeration.

Remediation Guide

To resolve this vulnerability, follow these config changes or developer practices:

Disable directory indexing in your web server configurations: For Nginx (nginx.conf): autoindex off; For Apache (.htaccess): Options -Indexes

Verify Your Fix

After applying the remediation, run an external attack-surface scan to verify that the vulnerability is no longer detected by WebScanify.

Is your website vulnerable?

Run a free security scan now to identify missing headers, outdated JS, and other deployment vulnerabilities.