Burp Suite's Intruder is used for what purpose?

• A. Manual editing of requests
• B. Traffic capture
• C. Automated payload delivery to identify vulnerabilities through fuzzing and testing
• D. Password cracking

Answer: (C)

Intruder’s purpose is to automate testing by delivering many crafted requests with different payloads to the target parameters, so you can see how the application responds to varied input and uncover vulnerabilities through fuzzing and systematic testing. You set which parts of a request to replace with payloads, choose the payload sources (lists, numbers, dictionaries), and select an attack type to drive how those payloads are applied. This speeds up finding issues like injection flaws, unusual error messages, or other weaknesses that manual testing might miss, because you can rapidly probe many input variants and analyze the responses.

Manual editing of requests is what Burp Repeater does, not Intruder. Traffic capture is handled by Burp Proxy, which records and displays the requests and responses. Password cracking is not the intended use of Intruder, which focuses on vulnerability discovery through automated payload delivery rather than breaking authentication.