The Problem
When you test a website to see if it is safe, you cannot just look at the main page. The real danger
is often in hidden folders. For example, a folder named /backups or
/admin_login. If there are no links to these pages, a normal user will never find them.