I have a parameter
args=[490114,{"user_login":"user@example.com","":"","perm":"view","partners":[],"event_labels":[]}]
in the HTTP request but in the encoded format.
I want to brute force this email using burpsuite but i get error code 400 bad request. The reproducible steps are:
- I intercept the request with burpsuite and send the parameters (args) to intruder and choose only it
- I copy and paste the payload several times changing only the email value in the payload (to test the operation)
- Launch the attack
But I get error code 400 bad request. I don't know why.