Ojooo App. inurl:"login.php" wso 2.6 ext shell/apps/guestbook/scarbook.php...
Hydra: Login password brute-forcing utility. Nikto: Web server security scanner.