Using Intruder

Intruder is a great tool which allows us to perform different types of attacks that can be used to find all kinds of vulnerabilities. Some of the most common attacks that can be performed with Intruder are as follows:

• Bruteforce
• Fuzzing
• Enumeration
• Application layer DoS

How to do it...

We start off picking up a request from our captured requests:

1. Right-click on the request and select Send to Intruder:

2. Switch to the Intruder tab. We need to specify a payload position, and we can do that by selecting the place we want or selecting the payload and clicking on the Add § button:

3. In our case, since we are performing a login brute force, we will use the attack type Pitchfork:

4. Next, we switch to the...