Web crawling and directory brute-force attacks