http://maverick.i2p/blog/reconnaissance
A config file named .env or config.php.bak is game over. Start small before you go loud. BASH gobuster dir - u http://target.com \ - w /usr/share/wordlists/seclists/Discovery/Web-Content/common.txt \ - x php,txt,json,bak \ - t 50 If rate limits or WAF triggers, slow down and randomize: BASH ffuf - u http://target.com/FUZZ - w /usr/share/wordlists/seclists/Discovery/Web-Content/common.txt - rate 10 - fc 404 Watch the status codes. 200 : It’s there. 403 : It’s there, but you are forbidden.