Penetration testing- Tools & Software > WebApp testing

Directory Scanner Nessus plugin
Directory Scanner by Digital Defense contains a nice list of common directory and file names, it's a nessus plugin but should be fairly easy to use externally.
http://www.nessus.org/plugins/index.php?view=single&id=11032

OWASP DirBuster Project
DirBuster is a multi threaded java application designed to brute force directories and files names on web/application servers. Often is the case now of what looks like a web server in a state of default installation is actually not, and has pages and applications hidden within. DirBuster attempts to find these.
http://www.owasp.org/index.php/Category:OWASP_DirBuster_Project


	[Home] [Suggest a Link] [Our Blog] [Contact Us]
	Created in an attempt to have an organized directory strictly related to the penetration testing business, here's the project! Always looking for contributions in terms of submitting links and categories, feedback, and anything that may help the project grow into a useful resource. Don't miss our Blog for any particular tips and tricks and feel free to add yours to our Blogs category!