How would you find "hidden" directories on a web site?

[BaDaBooM]

My friend put some stuff that isn't for other people eyes up on a directory on his web server but doesn't have any links to it. I told him he shouldn't do that. However he thinks that nobody will find it since there are no links to it and someone would have to guess the exact directory name so he can use it just for him. I tried to tell him there is probably someone who could maybe get a directory listing of it, but he didn't believe me.

Now I've never had a reason to do this so I don't know how but I'm guessing there is a way. Is there?

 

[yoda291]

he's relatively safe if he disables directory listings and puts up a 404 page. But honestly, how hard is it to write an authentication routine?

 

[loup garou]

What's his domain? :evil:

 

[jfall]

Humm.. it is very easy to find all the directories.. I wouldn't recommend this at all.

 

[illusion88]

Originally posted by: yoda291
he's relatively safe if he disables directory listings and puts up a 404 page. But honestly, how hard is it to write an authentication routine?

yeah. Just make his ip address or ones he trusts able to access it. In all reality, is anyone going to hack it? probbaly not.

 

[BaDaBooM]

Originally posted by: werk
What's his domain? :evil:

Now, now....

That's what I told him to do.... to at least put some authentication or file permissions on it, but he don't listen. I don't think he wants to take the time to learn how to do that. However I was hoping that if I sent him a link to the directory and showed him that you could then he would take precautions before things were found all over the internet. Plus he's on cable modem and you know how much people on that just like to poke around on other people's machines.

 

[BaDaBooM]

Originally posted by: jfall
Humm.. it is very easy to find all the directories.. I wouldn't recommend this at all.

How?

 

[jfall]

Simple program like sam spade will do it

 

[SSP]

Originally posted by: BaDaBooM

Originally posted by: jfall
Humm.. it is very easy to find all the directories.. I wouldn't recommend this at all.

How?

Haha, I think you just want to know whats in his directory.

 

[Mallow]

if your the rightful web master you should be able to find them easily

 

[guapo337]

Originally posted by: SSP

Originally posted by: BaDaBooM

Originally posted by: jfall
Humm.. it is very easy to find all the directories.. I wouldn't recommend this at all.

How?

Haha, I think you just want to know whats in his directory.

i think he wants to prove his friend wrong.

correct me if i read this incorrectly.

 

[her209]

What wrong with putting it in another directory?

 

[Howard]

You type "gg money" in the console. This nets you $16000.

 

[DanFungus]

Originally posted by: Howard
You type "gg money" in the console. This nets you $16000.

hahaha

wait...i thought it was:

bind "mouse1" "kill"
then
bind "mouse2" "kill"