Using Intruder

Intruder is a great tool that allows us to perform different types of attacks that can be used to find all kinds of vulnerabilities. Here are some of the most common attacks that can be done with Intruder:

• Brute-force
• Fuzzing
• Enumeration
• Application-layer DoS

How to do it...

We start off by picking up a request from our captured requests:

1. Right-click the request and select Send to Intruder:

2. Switch to the Intruder tab and then specify a payload position. Select the place we want our payload to be at and then click the Add button:

3. Since we are performing a brute-force login, we will use the Pitchfork attack type:

4. Switch to the Payloads tab; this is where we will enter our payloads.
5. Choose the payload...