Content discovery - also called forced browsing or directory enumeration - is the technique of systematically requesting candidate paths to find the resources that are present but unlinked.
The idea that makes it work is simple and important:
"Hidden" is not "protected." An unlinked resource is still returned to anyone who requests its URL. Only a server-side authorization check actually protects it.
In this lesson you will:
- Read
robots.txtand the sitemap and see that they are maps, not access controls - and that they often hand an attacker the sensitive paths directly. - Compare gobuster and ffuf reference commands without executing a live scan.
- Triage simulated results by HTTP status code and response size to separate real findings from noise.
- Submit one hidden path shown in the simulation - for example
/ftp,/metrics, or/support/logs.
Estimated time: 10 to 15 minutes.
When you are ready, send the Continue signal.