You can do:

0d1n

===== 0d1n is a tool for automating customized attacks against web applications.

*brute force login and passwords in auth forms

*directory disclosure ( use PATH list to brute, and find HTTP status code )

*test to find SQL Injection and XSS vulnerabilities

*Options to load ANTI-CSRF token each request

*Options to use random proxy per request

*other functions...

require libcurl-dev or libcurl-devel(on rpm linux based)

need libcurl to run

$ sudo apt-get install libcurl-dev

if rpm distro

$ sudo yum install libcurl-devel

$ make

$./0d1n

Read the docs

Name		Name	Last commit message	Last commit date
Latest commit History 200 Commits
doc		doc
payloads		payloads
response2find		response2find
response_sources		response_sources
tables		tables
.gitattributes		.gitattributes
0d1n.c		0d1n.c
LICENSE.txt		LICENSE.txt
Makefile		Makefile
README.md		README.md
README.txt		README.txt
file_ops.c		file_ops.c
file_ops.h		file_ops.h
get_csrf_token.c		get_csrf_token.c
get_csrf_token.h		get_csrf_token.h
hammer1.conf		hammer1.conf
hammer2.conf		hammer2.conf
html_entities.c		html_entities.c
html_entities.h		html_entities.h
mem_ops.c		mem_ops.c
mem_ops.h		mem_ops.h
spider.c		spider.c
spider.h		spider.h
string_ops.c		string_ops.c
string_ops.h		string_ops.h
strsec.c		strsec.c
strsec.h		strsec.h
tamper.c		tamper.c
tamper.h		tamper.h
template.conf		template.conf
validate.c		validate.c
validate.h		validate.h