I am fairly new to Bug Crowd and general bug hunting. I have spent a lot of time in labs practicing different techniques and looking for vulnerabilities manually to understand it better however I want to start using some tooling. I am mostly familiar with Burp and Zap.
My question though is whether the Spider and Intruder features are generally considered safe against real world targets? I would assume not due to potential request rates on the backend however I thought I’d ask the Experts/Community for your opinion.
If not, what alternatives are there to automated aspects of the process?