List out all of payload for security testing

Summary

1. SQL Injection

2. XSS-Cross Site Sripting

Link: https://www.owasp.org/index.php/Top_10-2017_Top_10

• A1:2017 - Injection
• A2:2017 - Broken Authentication
• A3:2017 - Sensitive Data Exposure
• A4:2017 - XML External Entities (XXE)
• A5:2017- Broken Access Control
• A6:2017 - Security Misconfiguration
• A7:2017 - Cross-Site Scripting (XSS)
• A8:2017 - Insecure Deserialization
• A9:2017 - Using Components with Known Vulnerabilities
• A10:2017 - Insufficient Logging & Monitoring

• Kali Linux
• Web Developer
• Hackbar - Not compatible with Firefox Quantum
• Burp Proxy
• Fiddler
• DirBuster
• GoBuster
• Knockpy
• SQLmap
• Nikto
• Nessus
• Recon-ng
• Wappalyzer
• Metasploit
• OpenVAS

• Hack The Box
• Root-Me
• Zenk-Security
• W3Challs
• NewbieContest
• Vulnhub
• The Cryptopals Crypto Challenges
• Penetration Testing Practice Labs
• alert(1) to win
• Hacksplaining
• HackThisSite
• PentesterLab : Learn Web Penetration Testing: The Right Way
• Hackers.gg

• Zap OWASP
• Uniscan

• What is vulnerabilities ?

• https://github.com/swisskyrepo/PayloadsAllTheThings