start attack this starts sending fuzzed requestsand you will be able to quickly go through the results when ran the fuzzeri received output as shown in figure - figure - our fuzzer running in an intruder attack as you can see from the warning on line of the responsein request we discovered what appears to be sql injection vulnerability now of courseour fuzzer is only for demonstration purposesbut you'll be surprised how effective it can be for getting web application to output errorsdisclose application pathsor behave in ways that lots of other scanners might miss the important thing is to understand how we managed to get our custom extension in line with intruder attacks now let' create an extension that will assist us in performing some extended reconnaissance against web server