Directory listing enabled
Checks whether the root and common upload directories list their files.
Recommended next step if found
Disable directory listing on the web server.
Directory listing
A server-generated file index can reveal files that were not intended to be discoverable. Review the actual listed content and intended public access.
Related public checks
The following checks provide related public observations. Their presence does not mean this entire topic has been tested or that the application is secure.
Keep the scope.
A blocked or unfinished check remains unverified. Review technical recommendations with the person operating the website and test changes before applying them to a live service.
Read the full methodology