I've had a need to do some custom brute forcing on an app recently.
The only two tools I've found that will do it are Brutus, and Webhack4.
Neither tools is ssl aware and requirs an additional proxy which is a real pain in the ****.
I've found both tools are seriously lacking though, both in configuration and logging.
Eventually I had to give up using both tools as neither could do what I required.
Are their any other tools available to do the job?