+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+---- Thread: Accessing image galleries (/showthread.php?tid=4114077)
Accessing image galleries - jaxion - Mar 14, 2014
So basically I want to access "private" pictures on a website. The pictures are in format
http://img02.[WEBSITE].com/gallery/[USER_ID]/[PICTURE].jpg
If I have the link, I can access them, but I can't get the content of /[USER_ID]/ due to 403 Forbidden. I usually know the name of only 1 or 2 pictures in the folder. The pictures are encoded with a mixed 10 sign number/letter name so I can't bruteforce them. Any ideas on what vulnerabilities to try or look for ? I think the site uses nginx. If someone is interested I could provide a link to test the whole thing.
* - eddy1982 - Mar 14, 2014
I am guessing it's a dead end, the server doesn't allow directory listing so you have to bruteforce the links.
* - jaxion - Mar 14, 2014
(Mar 14, 2014 08:24 AM)eddy1982 Wrote: I am guessing it's a dead end, the server doesn't allow directory listing so you have to bruteforce the links.Can I trick some web application in the server to do it ?