+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Word Press content (/showthread.php?tid=5484951)
Word Press content - atticusfinch - Dec 5, 2016
Hey guys! I was thinking off that old trick you could do, where you could take a website url and if it was with wordpress, put /wp-content/uploads/ and view all uploads to their site. It seems to only work on older websites now or say you dont have permission. Is there a more recent way to get round this? Also is there an equivalent for other website providers like squarespace?
* - memory - Dec 6, 2016
Most newer Wordpress installations include by default, htaccess rules that now prevent that directory from public indexing. On some servers you'll notice that they either don't have the .htaccess file, or the rules in the htaccess file are not compatible with the type of web server they are using. (Example:Apache HTTP htaccess rules VS nginx)