adding dirb attack to test for exposed endpoints in our app that shouldnt be there