Predictable credentials
    Predictable sessions identifier (session idʼs)
    Predictable resource location (directories and files)
    Injections
    Path traversals
    Overflows
    Cross site scripting
    Authentication flaws
    Insecure direct object references

    Features:

    Multiple Injection points capability with multiple dictionaries
    Recursion (When doing directory bruteforce)
    Post, headers and authentication data brute forcing
    Output to HTML
    Colored output
    Hide results by return code, word numbers, line numbers, regex
    Cookies fuzzing
    Multi threading
    Proxy support
    SOCK support
    Time delays between requests
    Authentication support (NTLM, Basic)
    All parameters bruteforcing (POST and GET)
    Multiple encoders per payload
    Payload combinations with iterators
    Baseline request (to filter results against)
    Brute force HTTP methods
    Multiple proxy support (each request through a different proxy)
    HEAD scan (faster for resource discovery)
    Dictionaries tailored for known applications (Weblogic, Iplanet, Tomcat, Domino, Oracle 9i, Vignette, Coldfusion and many more