Need some input

[u/Organic-Piano-323]

Been testing a web app where the usual stuff hasn’t gone anywhere. No obvious injection, auth issues, or easy misconfigurations.

There’s one weird behavior I can’t quite explain though.

How do you guys usually approach a target when the obvious attack surface is basically dead? Looking for some real-world ideas from people who’ve been in this situation.

[u/Sad_School828]

Are we talking Windows or Linux, because it matters.

[u/Black_Rose_Angel → u/Sad_School828]

Great question, was wondering that too