The Abusing mod_userdir to enumerate user accounts recipe
The Testing default credentials in web applications recipe
The Brute-force password auditing WordPress installations recipe
The Detecting web servers vulnerable to slowloris denial of service attacks recipe