Web Security
Web Server Misconfiguration
Exposed .git directories, directory listing, leaked .env files, and default credentials — the quick wins that appear on almost every real engagement.
Beginner35 min7 lessons1 hands-on
First lesson free. The full module is part of Pro.
You'll be able to
- ✓Find and exploit directory listing on web servers
- ✓Recover source code from an exposed .git directory
- ✓Extract credentials and secrets from a leaked .env file
- ✓Exploit default credentials on common admin panels