From 474d9487f20dbcb5fa99cbdc6102c9d5183854ef Mon Sep 17 00:00:00 2001 From: JosephGregg Date: Thu, 19 May 2016 12:00:00 -0400 Subject: [PATCH] Update report_generator.go Provided quick fix command that site operators can use to disable directory indexing globally. --- report/report_generator.go | 1 + 1 file changed, 1 insertion(+) diff --git a/report/report_generator.go b/report/report_generator.go index db8bfef..3c660a6 100644 --- a/report/report_generator.go +++ b/report/report_generator.go @@ -139,6 +139,7 @@ func GenerateSimpleReport(reportFile string, report *OnionScanReport) { buffer.WriteString("\t Why this is bad: Open directories can reveal the existence of files\n\t not linked from the sites source code. Most of the time this is benign, but sometimes operators forget to clean up more sensitive folders.\n") buffer.WriteString("\t To fix, use .htaccess rules or equivalent to make reading directories listings forbidden.\n") + buffer.WriteString("\t Quick Fix (Disable indexing globally) for Debian / Ubuntu running Apache: a2dismod autoindex as root.\n") buffer.WriteString("\t Directories Identified:\n") for _, dir := range report.OpenDirectories { buffer.WriteString(fmt.Sprintf("\t\t%s\n", dir))