Ejpt v2 notes. Brute-forcing can be done through Nmap & MsfConsole.