../

To understand the threat, you must first understand web server behavior.

: Without a landing page (index.php/html), many servers are set to show the "Directory Index" by default. Predictable Naming

Or:

Here is a deep dive into what this means, why it happens, and the ethical/security implications. What is an "Index Of" Page?