> For the complete documentation index, see [llms.txt](https://ttp.parzival.sh/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://ttp.parzival.sh/pentesting/web-applications/tooling/burp-suite/intruder_attack_types.md). # Intruder Attack Types ### Sniper Only one payload set needs to be defined. This attack type is useful for fuzzing a number of request parameters individually for common vulnerabilities or for performing a brute-force attack against a single account. ### Battering Ram This uses a single set of payloads. It will place the payload into all of the defined payload positions at the same time.\ I have not found this to be useful during network penetration tests. ### Pitckfork This attack runs through all payload sets simultaneously, and places one payload into each position. This attack is great when performing attacks such as credential stuffing against a login form. ### Cluster bomb This attack iterates through each payload set in turn, so that all permutations of payload combinations are tested. This attack is great when targeting several accounts for a brute-force attack or when performing password spraying against an org. ### References {% embed url="" %}