<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Web on Bruno Blog</title><link>https://brunoteixeira1996.github.io/tags/web/</link><description>Recent content in Web on Bruno Blog</description><generator>Hugo</generator><language>en</language><lastBuildDate>Thu, 05 Nov 2026 00:00:00 +0000</lastBuildDate><atom:link href="https://brunoteixeira1996.github.io/tags/web/index.xml" rel="self" type="application/rss+xml"/><item><title>Index of /everything</title><link>https://brunoteixeira1996.github.io/posts/2026-11-05-index-of-everything/</link><pubDate>Thu, 05 Nov 2026 00:00:00 +0000</pubDate><guid>https://brunoteixeira1996.github.io/posts/2026-11-05-index-of-everything/</guid><description>&lt;h2 id="introduction">Introduction&lt;/h2>
&lt;p>Anyone who has spent time on the web recognises that plain, unstyled grey page: a bare list of files and folders under a heading that reads &lt;strong>&lt;code>Index of /&lt;/code>&lt;/strong>. For years it was part of the scenery. Web servers that could not find an index file (&lt;code>index.html&lt;/code>, &lt;code>index.php&lt;/code>,&amp;hellip;) and had directory listing enabled would simply hand back the &lt;em>contents of the folder&lt;/em>.&lt;/p>
&lt;p>On Apache this is &lt;code>mod_autoindex&lt;/code>, and for a long time it shipped enabled by default. It was convenient for sharing files internally, and precisely for that reason it ended up exposed to the whole Internet countless times. There was an era
when a simple Google dork, &lt;code>intitle:&amp;quot;index of&amp;quot;&lt;/code>, was an absolute classic of the reconnaissance phase.&lt;/p></description></item></channel></rss>