The Brute forcing HTTP authentication recipe
The Abusing mod_userdir to enumerate user accounts recipe
The Testing default credentials in web applications recipe
The Brute-force password auditing WordPress installations recipe
The Brute-force password auditing Joomla! installations recipe