[jaxion]

So basically I want to access "private" pictures on a website. The pictures are in format
http://img02.[WEBSITE].com/gallery/[USER_ID]/[PICTURE].jpg
If I have the link, I can access them, but I can't get the content of /[USER_ID]/ due to 403 Forbidden. I usually know the name of only 1 or 2 pictures in the folder. The pictures are encoded with a mixed 10 sign number/letter name so I can't bruteforce them. Any ideas on what vulnerabilities to try or look for ? I think the site uses nginx. If someone is interested I could provide a link to test the whole thing.

[eddy1982]

I am guessing it's a dead end, the server doesn't allow directory listing so you have to bruteforce the links.

[jaxion]

I am guessing it's a dead end, the server doesn't allow directory listing so you have to bruteforce the links.

Can I trick some web application in the server to do it ?