malicious-payload-bank

Terminology note: The payload classes here are practitioner-emergent and align with the OWASP Top 10 (owasp-top-10) and CWE Top 25 (cwe-top-25) - both authoritative industry sources. ISTQB has no canonical entry for "malicious payload"; the closest formal term is "security testing."

A reference catalog of adversarial inputs to use when authoring negative tests, security tests, or fuzz targets. This is a defensive skill - for testing your own application's input validation, not for unauthorized testing of others' systems.

When to use