IIS calls this "directory browsing." It must be explicitly enabled in the Feature Delegation or via <directoryBrowse enabled="true" /> in web.config .
A Google search using:
The presence of an page on a website is more than just a list of files—it is a critical security vulnerability known as Directory Listing or Information Exposure .
This specific search pattern is a Google Dork (advanced search operator) used to find web servers with Directory Listing
. It creates a literal list of every file and folder in that directory for the world to see. If you see this in your