Update
This release updates the default Intruder payload list to include email splitting attacks. For more information on email parsing discrepancies, including how they can be exploited, see the Splitting the Email Atom: Exploiting Parsers to Bypass Access Controls white paper by Gareth Heyes from our PortSwigger Research team.