Configuring Burp Intruder attacks - Port Swigger
Summary: PortSwigger's documentation describes how Burp Intruder opens each HTTP request in a new attack tab, inserts payloads into defined positions in the request, and sends each version to the target server. Attack configurations can be saved from the top-level Intruder menu, loaded into a future attack, or copied into any open tab, and the attack begins when the user clicks Start attack.
What you should know: Burp Intruder automates sending many payload variations of a single request to a target server, so a tool that ships as standard web-testing software can generate high-volume, varied traffic against an application with little manual effort.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026