we can use intruder for passwords spraying

tampering with username to append &email=[ouremails]

tampering with cookies?