You would be surprised at what people leave unprotected on a web server. An initial step in attacking a web application is Recon, and part of that entails| HackerTarget.com