Hidden Directories Found
Hidden directories can be enumerated within the application by making requests to those directories and
viewing the server response. A "403 Forbidden" error is returned if the directory exists, and a "404 Not Found"
error is returned if the directory does not exist. Remove any unnecessary subdirectories, and configure the web
server to return a "404 Not Found" response code when existing subdirectories are requested.
|
