add filename and path bruteforce by the correct way