{"action":"opened","issue":{"url":"https://api.github.com/repos/Arachni/arachni/issues/643","labels_url":"https://api.github.com/repos/Arachni/arachni/issues/643/labels{/name}","comments_url":"https://api.github.com/repos/Arachni/arachni/issues/643/comments","events_url":"https://api.github.com/repos/Arachni/arachni/issues/643/events","html_url":"https://github.com/Arachni/arachni/issues/643","id":119937790,"number":643,"title":"Directory listing in Server FP","user":{"login":"nrathaus","id":2032238,"avatar_url":"https://avatars.githubusercontent.com/u/2032238?v=3","gravatar_id":"","url":"https://api.github.com/users/nrathaus","html_url":"https://github.com/nrathaus","followers_url":"https://api.github.com/users/nrathaus/followers","following_url":"https://api.github.com/users/nrathaus/following{/other_user}","gists_url":"https://api.github.com/users/nrathaus/gists{/gist_id}","starred_url":"https://api.github.com/users/nrathaus/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/nrathaus/subscriptions","organizations_url":"https://api.github.com/users/nrathaus/orgs","repos_url":"https://api.github.com/users/nrathaus/repos","events_url":"https://api.github.com/users/nrathaus/events{/privacy}","received_events_url":"https://api.github.com/users/nrathaus/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":0,"created_at":"2015-12-02T13:12:30Z","updated_at":"2015-12-02T13:12:30Z","closed_at":null,"body":"The request sent:\r\nGET /Dir/ HTTP/1.1\r\nHost: X.X.X.X\r\nAccept-Encoding: gzip, deflate\r\nUser-Agent: Arachni/v1.3.2\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nCookie: AspxAutoDetectCookieSupport=1;ASP.NET_SessionId=A\r\n\r\nAnd the response below triggers this vulnerability as being present on the remote host\r\nHTTP/1.1 200 OK\r\nCache-Control: no-cache, no-store,no-cache, no-store\r\nPragma: no-cache,no-cache\r\nContent-Type: text/html; charset=utf-8\r\nContent-Encoding: gzip\r\nExpires: -1,-1\r\nVary: Accept-Encoding\r\nServer: NA\r\nSet-Cookie: ASP.NET_SessionId=; path=/; secure; HttpOnly\r\nX-Frame-Options: DENY\r\nX-UA-Compatible: IE=Edge\r\nDate: Wed, 02 Dec 2015 13:02:01 GMT\r\nContent-Length: 1712\r\n\r\n\r\n\r\n<!DOCTYPE html>\r\n\r\n<html xmlns=\"http://www.w3.org/1999/xhtml\">\r\n<head><meta http-equiv=\"Cache-Control\" content=\"no-cache\" /><meta http-equiv=\"Pragma\" content=\"no-cache\" />\r\n\r\n\r\n    <script type = \"text/javascript\" >\r\n        function preventBack() { window.history.forward(); }\r\n        setTimeout(\"preventBack()\", 0);\r\n        window.onunload = function () { null };\r\n</script>\r\n\r\n\r\n\r\n<script language=\"javascript\">\r\n    function checkKeyCode(evt) {\r\n\r\n        var evt = (evt) ? evt : ((event) ? event : null);\r\n        var node = (evt.target) ? evt.target : ((evt.srcElement) ? evt.srcElement : null);\r\n        if (event.keyCode == 116) {\r\n            evt.keyCode = 0;\r\n            return false\r\n        }\r\n    }\r\n    document.onkeydown = checkKeyCode;\r\n</script>\r\n\r\n    <title>\r\n\r\n</title><link rel=\"stylesheet\" href=\"css/style.css\" /><link rel=\"stylesheet\" href=\"css/uniform.default.css\" /><link href=\"Styles/Css.css\" rel=\"stylesheet\" /><link href=\"css/MasterStyle.css\" rel=\"stylesheet\" /></head>\r\n<body oncontextmenu=\"return false;\">\r\n    <form method=\"post\" action=\"\" id=\"form1\" autocomplete=\"off\">\r\n<input type=\"hidden\" name=\"__VIEWSTATE\" id=\"__VIEWSTATE\" value=\"\" />\r\n\r\n<input type=\"hidden\" name=\"__VIEWSTATEENCRYPTED\" id=\"__VIEWSTATEENCRYPTED\" value=\"\" />\r\n<input type=\"hidden\" name=\"__EVENTVALIDATION\" id=\"__EVENTVALIDATION\" value=\"\" />\r\n<div class=\"container\"> \r\n              <div class=\"up_top\">\r\n            <a href=\"javascript:void(0);\">\r\n                <img src=\"images/icons/btn_top.png\" alt=\"\"/></a>\r\n        </div>\r\n        <div class=\"header\">\r\n            <div class=\"wrapper\">\r\n                <h1 class=\"floatl logo\"><a href=\"http://www..com/\" target=\"_blank\">\r\n                    <img src=\"Resources/logo.png\" alt=\"\" /></a> </h1>\r\n                <div class=\"floatr\">\r\n                    <div class=\"clear\"></div>\r\n                    <div class=\"marb15 mart20\">\r\n                        <h3 class=\"floatl c_white\">Department of Home Affairs</h3>\r\n                        <div class=\"floatl flag\">\r\n                            <a href=\"index.html\">\r\n                                <img src=\"Resources/DHA.png\" alt=\"\" width=\"38\" height=\"24\" /></a>\r\n                        </div>\r\n                        <h3 class=\"floatl c_white\">In South Africa</h3>\r\n                        <div class=\"clear\"></div>\r\n                    </div>\r\n\r\n                    <div class=\"clear\"></div>\r\n                </div>\r\n                <div class=\"clear\"></div>\r\n            </div>\r\n        </div>\r\n            <div style=\"width:100%\">\r\n            <div class=\"wrapper\">\r\n                <div class=\"pad22 mart15\">\r\n                   \r\n                    \r\n                    <div class=\" common_form\">\r\n\r\n    <div style=\"margin:20px 20px 20px 20px;padding:20px 20px 20px 20px;border:3px solid #c6b8b8;width:310px;\">\r\n        \r\n        <table class=\"common_form\">\r\n            <tr>\r\n                <td>Email:<span class=\"required\">*</span></td>\r\n                \r\n                <td>\r\n                    <input name=\"txtEmail\" type=\"text\" maxlength=\"80\" id=\"txtEmail\" class=\"text\" style=\"text-transform:lowercase\" />\r\n                </td>\r\n                <td>\r\n                    \r\n                    \r\n                </td>\r\n            </tr>\r\n            <tr>\r\n                <td>Password:<span class=\"required\">*</span></td>\r\n                <td>\r\n                    <input name=\"txtPassword1\" type=\"password\" id=\"txtPassword1\" class=\"text\" />\r\n                </td>\r\n                <td>\r\n                    \r\n                </td>\r\n            </tr>\r\n            <tr>\r\n                <td colspan=\"2\">\r\n                    \r\n                </td>\r\n            </tr>\r\n            <tr>\r\n                <td></td>\r\n                <td align=\"right\">\r\n                    <input type=\"submit\" name=\"ctl09\" value=\"Log-in\" onclick=\"javascript:WebForm_DoPostBackWithOptions(new WebForm_PostBackOptions(&quot;ctl09&quot;, &quot;&quot;, true, &quot;&quot;, &quot;&quot;, false, false))\" class=\"button\" />\r\n                </td>\r\n            </tr>\r\n              \r\n            <tr style=\"display:block;\">\r\n                <td></td>\r\n                <td align=\"right\">\r\n                    <a href=\"ForgotPassword.aspx\" class=\"usefulLinks\">Forgot Password</a>\r\n                </td>\r\n            </tr>\r\n              \r\n        </table>\r\n    </div>\r\n\r\n                    </div>\r\n                </div>\r\n            </div>\r\n        </div>\r\n           <div class=\"wrapper\">\r\n            <div class=\"footer\">\r\n                <p class=\"floatl\">��  </p>\r\n\r\n                <div class=\"clear\"></div>\r\n            </div>\r\n        </div>\r\n    </div>\r\n    </form>\r\n</body>\r\n</html>"}}