robots.txt

robots.txt is a way to supposedly get search engines to leave your site's private resources alone, like a private API or something. But at the same time, you are making valuable resources easily known to attackers. It takes out the time and effort required for directory enumeration with DirBuster.

How can we come up with a better solution to robots.txt that doesn't paint obvious targets?

>>1

How can we come up with a better solution to robots.txt that doesn't paint obvious targets?

Restrict access to pages you want private and recognize that anything public is going to get scraped.