I've done pentests where we found a vulnerability that allows writing to arbitrary directories if you have sufficient permissions, and knowing the directory str

I've done pentests where we found a vulnerability that allows writing to arbitrary directories if you have sufficient permissions, and knowing the directory structure would make it so you don't have to guess which directories exist. It would also help if you were trying to bruteforce a login because it can show you what format the username is, like first initial + last name. It's not really much on it's own, but it could definitely be used to make other security issues more effective.