An open directory is a publicly reachable folder listing that lets anyone browse the files stored inside if access controls are missing or misconfigured. Instead of showing a normal application page, the server reveals filenames, paths, and sometimes file contents, which can expose logs, scripts, backups, credentials, or notes.
In cyber security, open directories matter because they can turn a minor web misconfiguration into an intelligence leak. Attackers may use them to find configuration files, identify software versions, harvest documents, or map internal workflows. Defenders use the same exposure to hunt for accidental publication, audit web servers and cloud buckets, and remove or restrict directory indexing. Disabling listing, enforcing authentication, and checking permissions are common protections.