Today i will show you a very easy way for those you have zero experience how they can get some credentials from other websites only for educational reasons.
1. Open Google.
2. Write: db_password filetype:env
3. Open the links and see all the credentials.
A lot of websites that has been build with Laravel have this vulnerability cause of the permission in their .env.