How To: Enumerate Directories and Files

How can a pen-tester identify directories and files that are hidden from the public? This is where it gets easy.
Nasdaq Hacked! This past weekend, Nasdaq revealed had been hit by cyber-vandals.
Facebook Hacked! Facebook accounts of four Mo. legislators are hacked

How can a pen-tester identify directories and files that are hidden from the public? This is where it gets easy.