Intel
Payloads
Test payloads from PayloadsAllTheThings, by the weakness class they exercise: each topic's titled passages with their code blocks, linked to the source.
For testing systems you own or are authorised to test, and for defending them. Nothing here is run by this page.
From PayloadsAllTheThings by Swissky and contributors. MIT License, Copyright (c) 2019 Swissky. The repository.
WeaknessInput Validation and Logic
- Every class
- Cross-site Scripting5
- Cross-Site Request Forgery1
- Open Redirect1
- Server-Side Request Forgery1
- SQL Injection4
- Command and Code Injection7
- Injection and Smuggling10
- Deserialization and Object Injection5
- File and Path Handling5
- Race Conditions1
- Denial of Service1
- Input Validation and Logic1
- Misconfiguration and Insecure Design10
- Cryptography1
- Information Disclosure4
- Authentication4
- Insecure Direct Object Reference1
- Other weaknesses2
1 of 64 topics · 1,085 passages in all
Input Validation and Logic
- Business Logic Errors11 passages · 0 code blocks
Business logic errors, also known as business logic flaws, are a type of application vulnerability that stems from the application's business logic, which is the part of the program that deals with real-world business rules and processes. These rules could include things like pricing models, transa…
Data as of 2026-11-14.