appscan漏洞--目录列表

最新推荐文章于 2025-04-06 21:17:26 发布

隐0士

最新推荐文章于 2025-04-06 21:17:26 发布

阅读量3.9k

点赞数

CC 4.0 BY-SA版权

分类专栏： appscan扫描漏洞

本文链接：https://blog.youkuaiyun.com/lyd135364/article/details/51720639

appscan扫描漏洞专栏收录该内容

6 篇文章

订阅专栏

本文介绍如何通过修改httpServer的httpd.conf配置文件来禁止服务器显示目录列表。具体操作包括更改Options指令设置以移除Indexes选项，并提供了一个具体的配置示例。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

直接访问http://xxx.xx.xxx.xx/images/后可以看到列表：

响应包含目录的内容（目录列表）。这表示服务器允许列示目录（通常不推荐此做法）

修改服务器配置以拒绝目录列表，修改httpServer的配置：/opt/IBM/HTTPServer/conf 的httpd.conf，看到

<Directory "/opt/IBM/HTTPServer/htdocs">

#
# Possible values for the Options directive are "None", "All",
# or any combination of:
# Indexes Includes FollowSymLinks SymLinksifOwnerMatch ExecCGI Multiviews
#
# Note that "MultiViews" must be named *explicitly* --- "Options All"
# doesn't give it to you.
#
# The Options directive is both complicated and important. Please see
# http://publib.boulder.ibm.com/httpserv/manual70/mod/core.html#options
# for more information.
#
Options Indexes FollowSymLinks =======>Options FollowSymLinks（去掉Indexes即可，表示不允许访问目录列表的意思）或者加上-号：Options -Indexes FollowSymLinks

#
# AllowOverride controls what directives may be placed in .htaccess files.
# It can be "All", "None", or any combination of the keywords:
# Options FileInfo AuthConfig Limit
#
AllowOverride None

#
# Controls who can get stuff from this server.
#
Order allow,deny
Allow from all

</Directory>