Web server consist of directories where files, information, application functions are stored to provide the services which does not have access to users. But attackers obtain these unauthorized directories, by traversing the directory in the address area of web browser and may misuse it