There is a site that has a personal account. Each user can upload a file (../upload) - txt file (previously the list was visible to everyone).
When going to: site.ru/upload

Forbidden You don't have permission to access /upload/ on this server.

But if you specify a direct path to the file ( site.ru/upload/file.txt ), then accordingly you can get access. There are many such files, and they have different names (brute-by-name would be appropriate, but file names can also be eq3wr23c23c.txt). In the Google cache, of course, there is no this page.
Maybe there is some way to get a list of these files?

    1 answer 1

    In the upload folder you need to create a .htaccess file and specify Options +Indexes in it.