Intel
Payloads
For testing systems you own or are authorised to test, and for defending them. Nothing here is run by this page.
From PayloadsAllTheThings by Swissky and contributors. MIT License, Copyright (c) 2019 Swissky. The repository.
WeaknessInformation Disclosure
- Every class
- Cross-site Scripting5
- Cross-Site Request Forgery1
- Open Redirect1
- Server-Side Request Forgery1
- SQL Injection4
- Command and Code Injection7
- Injection and Smuggling10
- Deserialization and Object Injection5
- File and Path Handling5
- Race Conditions1
- Denial of Service1
- Input Validation and Logic1
- Misconfiguration and Insecure Design10
- Cryptography1
- Information Disclosure4
- Authentication4
- Insecure Direct Object Reference1
- Other weaknesses2
4 of 64 topics · 1,085 passages in all
Information Disclosure
- Insecure Source Code Management24 passages · 16 code blocks
Insecure Source Code Management (SCM) can lead to several critical vulnerabilities in web applications and services. Developers often rely on SCM systems like Git and Subversion (SVN) to manage their source code versions. However, poor security practices, such as leaving .git and .svn folders in pr…
- API Key Leaks16 passages · 6 code blocks
API keys and tokens are forms of authentication commonly used to manage permissions and access to both public and private services. Leaking these sensitive pieces of data can lead to unauthorized access, compromised security, and potential data breaches.
- Web Cache Deception7 passages · 0 code blocks
Web Cache Deception (WCD) is a security vulnerability that occurs when a web server or caching proxy misinterprets a client's request for a web resource and subsequently serves a different resource, which may often be more sensitive or private, after caching it.
- Hidden Parameters3 passages · 0 code blocks
Web applications often have hidden or undocumented parameters that are not exposed in the user interface. Fuzzing can help discover these parameters, which might be vulnerable to various attacks.
Data as of 2026-11-14.