An attacker employs forceful browsing to access portions of a website that are otherwise unreachable through direct URL entry.