@fleitner said:
…, I’m sure there is a way to actually use the session obtained from the login to brute force / wordlist that word. Could someone pm me how this would be done if the word would not be so obvious?
I would also like to know what sort of directory enumeration can be performed in the situation. Would you need a custom script? or there is there a tool that already has this functionality?