Climbing Mount WebAppSec – Discovering Directories & Files with ZAP