Directory Scanning Attack

An attempt to scan and discern the layout or file structure of a web site or application for further attacks.

• Common file name
• Sensitive data in web root
• Online (in web root) backup
• Application fingerprinting

Choose a non-obvious, non-trivial, or hard to guess file layout structure.

• See Web Application Security and security attacks catalog.