how to attack laravel website for testing?

I have website intentionally I put index.php and htaccess files in root directory. I also gave public folder 777 permissions which is having videos and images. every video will open like this https://ift.tt/2MhnP6V this folder is also having 777 permissions.

I didn't try anything till now.

I want to attack this website and see what happen for my own learning.