[Enhancement] Brute force the hidden GET&POST parameters

[timwhitez]

ref: https://github.com/m4ll0k/Aron https://github.com/s0md3v/Arjun

[StasonJatham]

Good idea! I have a similar idea I am actually working on throwing https://github.com/OJ/gobuster/blob/master/gobusterdir/gobusterdir.go

I need to use the HEAD request check, otherwise it would probably result in an IP block