Open Web Application Security Project

Free
Java app used to find hidden pages & apps on web servers by brute-forcing dir & file names.