java application
bruteforce directories and filenames on applications
dictionary based attack as well
see advanced options
stop result, click on report and save the results