---
title: "Discussion on \"Every Web App Is Lying to You. Find Out How.\" | Hashnode"
description: "Discussion on \"Every Web App Is Lying to You. Find Out How.\". OSCP Prep, Part 11 — Web Enumeration: Dirbusting, Vhosts & Tech Fingerprinting\n\nEverything up to this point in the series has been a checklist. See port 21, run these five commands. See port 445, run"
url: "https://hashnode.com/posts/every-web-app-is-lying-to-you-find-out-how/6a32feb89415b8d25a1e100a"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [Every Web App Is Lying to You. Find Out How.](https://ashishhacks.hashnode.dev/every-web-app-is-lying-to-you-find-out-how?utm_source=hashnode&utm_medium=feed)

OSCP Prep, Part 11 — Web Enumeration: Dirbusting, Vhosts & Tech Fingerprinting Everything up to this point in the series has been a checklist. See port 21, run these five commands. See port 445, run

Jun 17 · 12 min read · ashishhacks.hashnode.dev  
Read the article

## Written by

[Ashish Ghimire](https://hashnode.com/@ashishghimire)

@ashishghimire · United States

  
[View profile](https://hashnode.com/@ashishghimire)

Life long learner.

Cybersecurity professional with a strong foundation in network security, GRC, system administration, SOC analyst, and threat hunting. Experienced in real-time threat detection, incident response, and security monitoring using tools such as Splunk, CrowdStrike Falcon, and Microsoft Entra ID. Skilled at securing enterprise environments and aligning security practices with compliance frameworks. Currently deepening expertise in penetration testing, red teaming, cloud security, malware analysis, and reverse engineering, with a strong commitment to continuous learning and operational excellence in cybersecurity.

## Responses 1

Markdown supported · ⌘↵ to post

[Sara](https://hashnode.com/@sar-a-a-a-a)

[Jun 23](https://hashnode.com/posts/every-web-app-is-lying-to-you-find-out-how/6a32feb89415b8d25a1e100a/comment/6a3aa836a69a561936bb559c)

This is a great angle! A lot of people trust what they see on the surface of web apps without realizing how much is actually exposed underneath. What’s interesting is how differently this shows up across smaller projects too. I’ve been browsing [https://unstore.io](https://unstore.io/) and it’s kind of eye-opening how many web apps expose patterns or implementation details once you start poking around a bit. Feels like posts like this + real-world exploration is where you really learn.