Directory Listing Exposure via HTTP

Darshan Thummar@Mighty

•updated Jun 10, 2026•0•0•2

This rule detects attempts to access directory listings on a web server via HTTP. It specifically looks for HTTP responses containing the string "Index of /" in the file data, which is a common indicator of an exposed directory listing. This exposure can allow attackers to discover sensitive files and directories on the server.