Showing posts with label Penetration Testing. Show all posts
Showing posts with label Penetration Testing. Show all posts

Monday, May 31, 2021

Penetration Testing Payloads

https://github.com/payloadbox

  • SQL Injection Payload
    • SQL injection, also known as SQLI, is a common attack vector that uses malicious SQL code for backend database manipulation to access information that was not intended to be displayed. This information may include any number of items, including sensitive company data, user lists or private customer details.
  • XSS Payload
  • XXE Payload
  • Command Injection Payload
  • Open-redirect Payload
  • RFI-LFI Payload

If we already have automation, what's the need for Agents?

“Automation” and “agent” sound similar — but they solve very different classes of problems. Automation = Fixed Instruction → Fixed Outcome ...