What Intruder does is it modifies a request in the specific positions we tell it to and replaces the values in those positions with the payloads defined in the Payloads section. Payloads may be, among other things:
- Simple list: A list that can be taken from a file, pasted from the clipboard, or written down in the textbox
- Runtime file: Intruder can take the payload from a file being read at runtime, so if the file is very large, it won't be loaded fully into memory
- Numbers: Generates a list of numbers that may be sequential or random and presented in hexadecimal or decimal form
- Username generator: Takes a list of email addresses and extracts possible usernames from it
- Bruteforcer: Takes a character set and uses it to generate ...