I figured you guys would be the most into it, because .txt files are kind of like /r/self posts. This is a little project I decided to work on in my spare time so that I could improve my PHP/JavaScript skills. Essentially, it's about that feeling you get from crawling those old websites that are just directory indexes, mysterious, wild places--you never know what you'll find. Index of / is all about that, but you can upload your own .txts and keep your own directory structures within your primary account.
No e-mail needed, totally anonymous, just a folder name and a password. Check it out (and feel free to try to break the hell out of it): Index of /
I hope this post is OK here! Thanks.
EDIT: Whoa! This just frontpage'd! Okay, thanks a ton, guys. I've gotten some PMs already and you guys have pointed out vulnerability in my code and I'll get to fixing them immediately. In the meantime, please do not try to actually break it. Thanks a ton for all of your suggestions--I'm writing them all down.
. . .
EDIT 4: I think I've ironed out the security issues. Please let me know if you find any. Thanks!
EDIT 5: I've learned so much! Thanks so much, you guys really put this thing through the ringer. I've patched up the security issues to the best of my abilities with what must be the equivalent of digital duct tape, but it should hold. I'll be working on rolling out a more efficient Index of / v1.1 over the next week or so. I'll still be around to answer questions and the like. Thanks for taking a look!
My question originates from this issue I made with Sixem's eyy-indexer: https://github.com/sixem/eyy-indexer/issues/12
All of my question is explained there, but I'll paste everything below:
Context: My friend and I share a VPS, they setup WebDAV for a note application (Joplin) that they use in order to keep encrypted backups of the notes stored on the VPS.
Directory listing content is served from: /var/www/html/
The problem as explained by them:
> If webdav is placed outside the [/var/www/]html folder, we get a 500 because it's an invalid path to the indexer, if it's placed in the [/var/www/]html folder, it sends a wacky XML response(?) that messes with both Joplin and all my webdav clients
Here's the error that Joplin puts out if the indexer is in the /var/www/html/ folder:
image
My best guess is that WebDAV doesn't like the indexer trying to change stuff in that folder, which brings up the question: "Is it possible to disable the indexer on certain directories?"
After discussing it more, I've got:
If the webdav folder is in /var/www/ and Apache is configured to serve the site via direct linking only (no showing it under the default apache directory listings) and without the eyy-indexer in the /var/www/html then webdav works.
If the webdav folder is in the /var/www/html/ folder and Apache is configured to serve the site via direct linking only (no showing it under the default apache directory listings) and with the eyy-indexer in the /var/ww/html/ folder then webdav works in the sense that the folder is not shown and is properly password protected, but the webdav folder is unable to be properly utilized by Joplin (or any webdav client) and results in this error:
[BREAK]
Sixem's reponse to this was:
> I have to say that this is a little bit confusing as i've never used any of these programs, but to me it looks like Joplin is trying to access or fetch a response from a URL where the indexer is active? It expects some XML data but all it gets it the HTML of the indexer. This would make sense if it is resolved once the indexer is out of /var/www/html/ as by default it will be applied to every valid path without any
For Example: Game of Thrones Index
For example, the default directory index page looks like this:
Is there a default index html file I can modify? For example, the Australian AARNET mirror server (don't know if it runs Apache) does not look like the screenshot above. Instead it's customized to look like their website. Example: https://mirror.aarnet.edu.au/pub/fedora/linux/ . How could I change how the directory index looks?
If i add the code options -indexes to htaccess will google still crawl & index my directories in search results?
Is blocking by robots. txt as (Disallow: /wp*) still needed?
The Hive Index directory of writing communities lists online communities from across the internet.
From The Hive Index:
>THE HIVE INDEX
>
>A directory of online communities
>
>We believe that all who want to surround themselves with community should be able to do so.
>
>This website is a free resource for professionals, creatives, students, teachers, entrepreneurs, and those that are just looking for some likeminded souls to hang out with.
>
>With your help, this list of communities & topics can keep growing. If you know of a good community that's not listed, submit it. If you'd like a new topic curated, let us know.
>
>Thanks, and welcome to the Hive Index.
This is revision 5, which is also glitching out:
RewriteEngine On
RewriteCond %{HTTP_HOST} ^[^.]+\.(example\.com)$ [NC]
RewriteRule ^ http://%1 [R=301,L,NE]
Am I better off taking a few hour lesson in something that should take 30 seconds, or is there someone out there that can actually understand what all the symbols do and mean, and know if it's my code or if it's my webserver that's at fault?
I don't know if I should have multiple lines of rules, or if I should be combining them into one. I understand that [L] makes it obey a previously stated rule, but that's as far as I can get until my webserver informs me that everything I just spent 20 minutes learning is actually not true.
Again, this all worked in the MadeWithLove tester, but when I put it on my webserver I get infinite redirects.
It is likely that this topic was already discussed but my search fu failed.
So far I saw the following approaches (done either through config management tools or with direct access):
-
Have all the configs specific to the webserver X in /etc/apache/* , /etc/ssl/* and so on. So following the standard of Linux more or less.
-
Have everything specific to the webserver X in one path , like /configs/webserverX/* and then link those configs from the standard places like /etc/apache/* /etc/ssl/* etc.
-
Have a mixed approach of the two above. shivers
I personally like the middle approach, with links. Because (especially in companies where people go on single servers) at least it is all in one place and not scattered in 34 directories.
Anyway, what approach do you use?
Hi,
I am trying to unzip wordpress zip on webserver but get the error not writable. how can i fix this please?
Hi all
Looks like Google is picking on me and giving me bad search results.
Anyway, I'm simply trying to create multiple files in a quick way.
touch Components/{index.js, style.module.css}
I get the error -- zsh: parse error near `}' --
Suggestions?
I'm kinda curious. EDIT: holy smokes im on hot section.
https://openuserjs.org/scripts/gaspar_schot/Supercharged_Local_Directory_File_Browser
Works on both local directories and user-defined remote open directories.
Note: Users must manually add the urls for remote directories in the code or in the script settings of your userscript manager (e.g., Tampermonkey or Greasemonkey). Please read the description on the script page for more information.
Hey, imma a newb and have seen these (see below) repeated terms used throughout the subreddit and can't find what they mind. A quick explanation of each would be appreciated
( intitle:"index of ) What exactly is this command? is intitle and index two different things or are they part of this command? When using this command, do you replace index of with the thing you are trying to search for or do you put it on the right side of it?
( +"last modified ) I have seen someone suggest using this when explaining a general format to find things but I dont know what it means
( "parent directory" ) Same as the other thing, what is it?
I have seen many sites that people on here point to to "find" open directories. What does that mean? Cant you just use google to find open directories, or are open directories hidden to certain search browsers or something?
I saw someone on the subreddit post this ( A Simple Search for Cats:
+(.jpg|.gif|.png|.tif|.tiff|.psd) Cats intitle:"index of") When they do +(.jpg|.gif|.png|.tif|.tiff|.psd) does that mean they are suggesting that you search for all of these types of files when looking for cats or does putting the +() make all of the files included in the () part of the search ? They used intitle:"index of" command at the end of the command, is that possible? necessary?
Thanks to all that helped
When using the native LSP (and it looks like non-native clients such as CoC) in neovim to go to references for example, I never get all of the references in my project.
It will either show a singular reference of it's implementation, or sometimes show a handful of references but not all of them.
I run neovim with nvim . if that makes a difference and I'm also using JavaScript with the TypeScript LSP (no TypeScript types within the project).
I know references should work because when going to an IDE such as WebStorm I get all available references (but it also seems like VSCode doesn't list all the references [could it be a language server thing?]).
What did I do wrong?
So we came into work today and our Red Hat Enterprise Linux virtual web server was displaying the default Apache empty directory page for all of the sites we host.
So we look into the web server via FTP and we found that all the files within the var directory had been completely removed. The only thing that remained were the folders for each of the sites we hosted, and the folders within those sites. Basically - as skeleton file structure.
Our host provider informed us they had a backup completed from about 20 minutes before the files disappeared, so we were lucky in that regard.
So we are trying to figure out what happened. I've done an initial search online for similar situations, but I haven't seen anything quite like what we are experiencing.
Most of, if not all of the files in the var directory were set to apache:apache. All the mysql DB's associated to sites lost, are still intact (thank heavens). The apache config file is still configured as it was before.
I'm not certain if all the files were set to a proper permissions level, just due to the number of sites we host for our offices, and knowing that at times I have changed permissions when needed.
Has anyone ever seen anything like it? On one hand I feel like we may have been hacked in some way, (though our hosting company says they show no signs of entry over SSH, and that there were no other signs (though I'm not clear on what those other signs may have been, or how clear it would be if they weren't monitoring/auditing before hand)), and on the other hand I feel like I can't rule out some sort of technical issue that may have caused it.
In advanced, I would like to thank anyone you is able to theorize or speak of a similar (preferably the same) experience of their own.
Would also be great to know where they are found ( book or WD ) and models needed if its a narrative campaign.
Just getting started and want to plan out the order of what books i want next. Thanks
I do not understand very well the relationship of webserver, its index.html file, django, flask frameworks, javascript, and JSON.
I love writing python scripts, and want to broaden its use to my public facing website. With a basic index.html that says hello world. How can I minimally get it to run a simple calc.py (return 2+2).
So the website should display "hello world4".
I've recently tried django and understand that it follows MVC, but seems way to complicated for my simple question. I thought django should dynamically build my index.html file. I'm not too clear how django works but it seems I created the index.html myself and not what I imagined it to do.
I've tried flask afterwards, and though simple enough, I no longer have an index.html file.
Right now I am trying to learn how to call python scripts with index.html, both in the same directory.
I eventually want to pass JSON data in the url as a query string and have the python script compute and return the data to be displayed. The public should not be able to see the contents of the python script. I was also hoping I wouldn't have to display any extensions in the url, if possible.
Thanks for your help!
I've not investigated the Arq 5 backups running on my Windows 8.1 laptop in a while. When I looked in the log today, I saw that it has been getting this error repeatedly:
>Arq Agent version 5.16.6 started backup session for OneDrive/1.... on 7/8/2021 1:12:44 PM
Error: create items_slashed_directory index: SQL logic error
>
>index items_slashed_directory already exists
Arq ended backup session for OneDrive/1... ended on 7/8/2021 1:12:44 PM
But Googling this brings up nothing at all.
Any tips?
I am very much a newb when it comes to git, which is probably obvious by my question. Any help is greatly appreciated though.
I am trying to figure out how to get git to work in my environment.
We have a web server with an /html directory and a /includes directory. If I'm working on a web page, it may involve files from both directories. Is there a way I can get these two directories into one git repo, without combining the directories? Or do I need to have two separate repos, one in each folder?
Hi /r/forhire,
To put it bluntly I have a massive music/audio library categorized into instrumentals, acappellas, stems/multitracks, as well as official releases [categorized by artist] (albums, singles, etc.).
I've spent years organizing and building it to where it is, but I am looking to hire for help with copying files (ex: instrumentals from singles, acappellas from stems, etc) and cataloguing them in their respective directories.
Just to note, I have done a lot of this work already, but I would like help as well with optimizing the structure of the whole directory and index itself because I need to be able to navigate through it quickly. Mostly everything is like "80%" done, but there are some tasks that are more beyond my scope. Things will make a lot more sense once you take a look at it.
I'd like someone who has somewhat relevant experience with projects such as this (especially with digital music/audio, tv/movies & image files). My budget is between $500-1800. I know this is a wide range but this is pretty flexible so we can start with some of the lighter work at first, and if things work well between us there can be opportunity for more work and more pay for you!
Thanks!
Say there's a site with an URL scheme like www.website.com/products/nameofproduct. Would it be possible in some way or another to visit every product page in the directory and extract the data contained in said pages without the list of product names acting as an index to begin with? I believe it would not be possible unless you went over every possible combination of characters but I was wondering if with some fancy web scraping it would be feasible.
HyvΓ€ esimerkki: Game Of Thrones Index
For Example: Game of Thrones Index
https://openuserjs.org/scripts/gaspar_schot/Supercharged_Local_Directory_File_Browser
Works on both local and user-defined remote directories.
