Burp Payloader

Class

Technique

Context

Catalog

Adapt to target

Generate request creates one Repeater-ready test with the payload inserted into the described parameter. If the model output is not usable, the app builds a clean request from the catalog.

Class

Technique

Encoding

Payload set

Expand locally

Add one variant asks the local assistant first, then appends one clean payload value. If the output is not usable, the app appends one fresh catalog variant.

What this does

Burp Payloader gives you ready-made payloads for authorized web testing. Pick a vulnerability class, copy a payload, and paste it into Burp Suite Repeater or Intruder.

Quick start

Choose a class such as SQL injection, XSS, or SSRF.
Filter by technique or search for a word you recognize.
Click copy next to a payload.
Paste it into the request parameter you are testing in Burp.
Look for a changed response, error, delay, redirect, or reflected text.

Repeater tab

Use Repeater when you are testing one request by hand. Copy one payload at a time and watch how the server response changes.

Intruder tab

Use Intruder when you want a list. Pick filters, choose an encoding if needed, then copy or download the list for a Burp Intruder payload set.

Why Generate is disabled

Generate request creates one Repeater-ready HTTP test with the payload inserted into the parameter you described. Add one variant keeps Intruder simple by appending one payload line to the list.

If the local model refuses or produces poor output, the app builds a clean request or payload from the catalog. Each click rotates and mutates the choice so you are not stuck with the same output.

What variants are

Variants are extra payload ideas based on the notes in the text box, such as a JSON login request, a blocked quote character, or a reflected search parameter.