Author Topic: how to find out absolute website path ?  (Read 735 times)

0 Members and 1 Guest are viewing this topic.

Offline x41r3d

  • NULL
  • Posts: 3
  • Cookies: 0
    • View Profile
how to find out absolute website path ?
« on: October 05, 2015, 04:32:17 am »
how can i find out the absolute path from a website.

for example site is saved in:

/var/www/websitefolder or /home/public_html/websitefolder

how can we get this information from outside???

is it possible generally? are there any scanners out there that can handle this ?
« Last Edit: October 05, 2015, 04:58:17 am by x41r3d »

Offline hcac

  • Serf
  • *
  • Posts: 25
  • Cookies: 4
    • View Profile
Re: how to find out absolute website path ?
« Reply #1 on: October 05, 2015, 03:54:19 pm »
It shouldn't be possible, but it is lots of times.
"Full Path Disclosure", it's encountered as a bug.
An example you may seen, is the php errors, if error_reporting is on and there's something wrong..
As it's a bug, most scanners should report it (if they find it :d).
The abs path usually, can reveal so many things or even used in some kind of combination with another vuln like LFI (local file inclusion).

Offline x41r3d

  • NULL
  • Posts: 3
  • Cookies: 0
    • View Profile
Re: how to find out absolute website path ?
« Reply #2 on: October 06, 2015, 02:20:42 am »
"Full Path Disclosure", it's encountered as a bug.


that was the info i need :). thx