Learnopro Website Development and Testing

Cluster Bomb
Wordlists: Multiple
The cluster bomb attack type enumerates over multiple parameters by using all the possible combinations of payloads from the multiple wordlists.

So if you have multiple parameters, it will enumerate over one of the parameters with all the payloads from its respective wordlist, while the other parameters have the first payload from their respective textlist loaded.

Format:
1st request - param1= textlist 1[0] & param2= textlist 2[0]
2nd request - param1= textlist 1[1] & param2= textlist 2[0]
3rd request - param1= textlist 1[2] & param2= textlist 2[0]..

After enumerating through param1 with all the payloads from textlist1,

1st request - param1= textlist 1[0] & param2= textlist 2[1]
2nd request - param1= textlist 1[1] & param2= textlist 2[1]
3rd request - param1= textlist 1[2] & param2= textlist 2[1]..

Web Application Security Using Burp Suit- brute force Attack