BFScan: Uncover Hidden URLs, Paths, & Secrets in JAR/WAR/APK Files