How Default Server Configurations Expose Critical Information.

بسم الله الرحمن الرحيم

Hello fellow, how are you? Hopefully you are always healthy and given smooth in your activities.

Scenario

Directory Listing is a web server feature that lists all files in a directory if there is no index file (like index.php or index.html). In this case, I found a web application that stored user documents in the /uploads folder.

Reconnaissance with basic tools.

When I was doing active scanning to map the application structure, I found an interesting endpoint. The server was not only exposing Directory Listing, but also several configuration files.

The server displayed Index of /uploads/. There I could see thousands of files (PDF, JPG) belonging to users.

The phpinfo.php file exposed environment variables, server paths, and PHP version information.

References

• OWASP: Security Misconfiguration
• CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
• Apache Security Hardening Guide

Note

I forgot to keep a proper report log, including the exact date and timeline of when I reported this finding.

This was part of my exploration and an attempt to help improve security in an Indonesian government environment. The finding was received positively, and I collaborated with a friend who was close to the area. They met with the relevant party, and the issue has since been fixed.

I am posting this as a record of my journey and learning process, not for any particular purpose.

If you are interested in security testing services, I'm open to discussing potential projects and collaborations.

Forum Kami : Info Security World Voice Discord : Penjelajah Cyber Security Ini Saya : Raja Muhammad Kurnia Setyawan