evil_faker 0.1.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (135) hide show
  1. checksums.yaml +7 -0
  2. data/CHANGELOG.md +62 -0
  3. data/GENERATORS.md +164 -0
  4. data/LICENSE.txt +21 -0
  5. data/NOTICE.md +196 -0
  6. data/README.md +156 -0
  7. data/Rakefile +12 -0
  8. data/lib/evil_faker/base.rb +50 -0
  9. data/lib/evil_faker/data/blns.txt +742 -0
  10. data/lib/evil_faker/data/groups/blns/emoji/emoji.txt +10 -0
  11. data/lib/evil_faker/data/groups/blns/emoji/emoticons.txt +12 -0
  12. data/lib/evil_faker/data/groups/blns/emoji/regional.txt +3 -0
  13. data/lib/evil_faker/data/groups/blns/exploits/cves.txt +4 -0
  14. data/lib/evil_faker/data/groups/blns/exploits/human.txt +1 -0
  15. data/lib/evil_faker/data/groups/blns/exploits/ios.txt +3 -0
  16. data/lib/evil_faker/data/groups/blns/exploits/irc.txt +1 -0
  17. data/lib/evil_faker/data/groups/blns/filenames.txt +14 -0
  18. data/lib/evil_faker/data/groups/blns/injection/command.txt +6 -0
  19. data/lib/evil_faker/data/groups/blns/injection/file_inclusion.txt +2 -0
  20. data/lib/evil_faker/data/groups/blns/injection/interpolation.txt +9 -0
  21. data/lib/evil_faker/data/groups/blns/injection/jinja2.txt +2 -0
  22. data/lib/evil_faker/data/groups/blns/injection/script.txt +236 -0
  23. data/lib/evil_faker/data/groups/blns/injection/server_code.txt +9 -0
  24. data/lib/evil_faker/data/groups/blns/injection/sql.txt +8 -0
  25. data/lib/evil_faker/data/groups/blns/injection/xxe.txt +1 -0
  26. data/lib/evil_faker/data/groups/blns/numeric/numeric.txt +71 -0
  27. data/lib/evil_faker/data/groups/blns/numeric/unicode_numbers.txt +2 -0
  28. data/lib/evil_faker/data/groups/blns/profanity.txt +22 -0
  29. data/lib/evil_faker/data/groups/blns/reserved.txt +19 -0
  30. data/lib/evil_faker/data/groups/blns/rtl.txt +7 -0
  31. data/lib/evil_faker/data/groups/blns/terminal.txt +3 -0
  32. data/lib/evil_faker/data/groups/blns/unicode/accents.txt +4 -0
  33. data/lib/evil_faker/data/groups/blns/unicode/bom.txt +2 -0
  34. data/lib/evil_faker/data/groups/blns/unicode/controls.txt +3 -0
  35. data/lib/evil_faker/data/groups/blns/unicode/font.txt +8 -0
  36. data/lib/evil_faker/data/groups/blns/unicode/lowercase.txt +2 -0
  37. data/lib/evil_faker/data/groups/blns/unicode/quotes.txt +11 -0
  38. data/lib/evil_faker/data/groups/blns/unicode/scripts.txt +2 -0
  39. data/lib/evil_faker/data/groups/blns/unicode/special.txt +4 -0
  40. data/lib/evil_faker/data/groups/blns/unicode/symbols.txt +12 -0
  41. data/lib/evil_faker/data/groups/blns/unicode/trick.txt +5 -0
  42. data/lib/evil_faker/data/groups/blns/unicode/two_byte.txt +10 -0
  43. data/lib/evil_faker/data/groups/blns/unicode/upsidedown.txt +2 -0
  44. data/lib/evil_faker/data/groups/blns/unicode/whitespace.txt +1 -0
  45. data/lib/evil_faker/data/groups/blns/zalgo.txt +5 -0
  46. data/lib/evil_faker/data/groups/fuzzdb/email/invalid.txt +26 -0
  47. data/lib/evil_faker/data/groups/fuzzdb/email/valid.txt +32 -0
  48. data/lib/evil_faker/data/groups/fuzzdb/emoji/emoji.txt +8 -0
  49. data/lib/evil_faker/data/groups/fuzzdb/emoji/emoticons.txt +11 -0
  50. data/lib/evil_faker/data/groups/fuzzdb/emoji/regional.txt +3 -0
  51. data/lib/evil_faker/data/groups/fuzzdb/exploits/ios.txt +1 -0
  52. data/lib/evil_faker/data/groups/fuzzdb/headers/mimetypes.txt +1864 -0
  53. data/lib/evil_faker/data/groups/fuzzdb/headers/protocol.txt +357 -0
  54. data/lib/evil_faker/data/groups/fuzzdb/injection/command.txt +1115 -0
  55. data/lib/evil_faker/data/groups/fuzzdb/injection/directory_traversal.txt +536 -0
  56. data/lib/evil_faker/data/groups/fuzzdb/injection/file_inclusion.txt +906 -0
  57. data/lib/evil_faker/data/groups/fuzzdb/injection/file_upload_bypass.txt +371 -0
  58. data/lib/evil_faker/data/groups/fuzzdb/injection/format_strings.txt +67 -0
  59. data/lib/evil_faker/data/groups/fuzzdb/injection/generic.txt +584 -0
  60. data/lib/evil_faker/data/groups/fuzzdb/injection/integer_overflow.txt +12 -0
  61. data/lib/evil_faker/data/groups/fuzzdb/injection/json.txt +89 -0
  62. data/lib/evil_faker/data/groups/fuzzdb/injection/ldap.txt +35 -0
  63. data/lib/evil_faker/data/groups/fuzzdb/injection/magic_hashes.txt +24 -0
  64. data/lib/evil_faker/data/groups/fuzzdb/injection/nosql.txt +17 -0
  65. data/lib/evil_faker/data/groups/fuzzdb/injection/open_redirect.txt +37 -0
  66. data/lib/evil_faker/data/groups/fuzzdb/injection/rfi.txt +2241 -0
  67. data/lib/evil_faker/data/groups/fuzzdb/injection/script.txt +930 -0
  68. data/lib/evil_faker/data/groups/fuzzdb/injection/server_side_include.txt +78 -0
  69. data/lib/evil_faker/data/groups/fuzzdb/injection/source_disclosure.txt +18 -0
  70. data/lib/evil_faker/data/groups/fuzzdb/injection/sql.txt +661 -0
  71. data/lib/evil_faker/data/groups/fuzzdb/injection/ssrf.txt +56 -0
  72. data/lib/evil_faker/data/groups/fuzzdb/injection/type_confusion.txt +329 -0
  73. data/lib/evil_faker/data/groups/fuzzdb/injection/xpath.txt +13 -0
  74. data/lib/evil_faker/data/groups/fuzzdb/injection/xxe.txt +65 -0
  75. data/lib/evil_faker/data/groups/fuzzdb/routes/debug_params.txt +157 -0
  76. data/lib/evil_faker/data/groups/fuzzdb/routes/directory_indexing.txt +15 -0
  77. data/lib/evil_faker/data/groups/fuzzdb/routes/local_paths.txt +26 -0
  78. data/lib/evil_faker/data/groups/fuzzdb/rtl.txt +5 -0
  79. data/lib/evil_faker/data/groups/fuzzdb/terminal.txt +3 -0
  80. data/lib/evil_faker/data/groups/fuzzdb/unicode/bad_chars.txt +15 -0
  81. data/lib/evil_faker/data/groups/fuzzdb/unicode/special.txt +31 -0
  82. data/lib/evil_faker/data/groups/fuzzdb/unicode/trick.txt +5 -0
  83. data/lib/evil_faker/data/groups/fuzzdb/unicode/two_byte.txt +9 -0
  84. data/lib/evil_faker/data/groups/fuzzdb/unicode/upsidedown.txt +2 -0
  85. data/lib/evil_faker/data/groups/intruder_payloads/filenames.txt +124 -0
  86. data/lib/evil_faker/data/groups/intruder_payloads/injection/command.txt +445 -0
  87. data/lib/evil_faker/data/groups/intruder_payloads/injection/directory_traversal.txt +2578 -0
  88. data/lib/evil_faker/data/groups/intruder_payloads/injection/file_inclusion.txt +698 -0
  89. data/lib/evil_faker/data/groups/intruder_payloads/injection/generic.txt +1401 -0
  90. data/lib/evil_faker/data/groups/intruder_payloads/injection/overflow.txt +36 -0
  91. data/lib/evil_faker/data/groups/intruder_payloads/injection/script.txt +61 -0
  92. data/lib/evil_faker/data/groups/intruder_payloads/injection/server_side_include.txt +18 -0
  93. data/lib/evil_faker/data/groups/intruder_payloads/injection/sql.txt +753 -0
  94. data/lib/evil_faker/data/groups/intruder_payloads/injection/xxe.txt +66 -0
  95. data/lib/evil_faker/data/groups/intruder_payloads/unicode/bad_chars.txt +1 -0
  96. data/lib/evil_faker/data/groups/payloads_all_the_things/headers/cache_deception.txt +1125 -0
  97. data/lib/evil_faker/data/groups/payloads_all_the_things/injection/command.txt +496 -0
  98. data/lib/evil_faker/data/groups/payloads_all_the_things/injection/directory_traversal.txt +22607 -0
  99. data/lib/evil_faker/data/groups/payloads_all_the_things/injection/file_inclusion.txt +4787 -0
  100. data/lib/evil_faker/data/groups/payloads_all_the_things/injection/ldap.txt +60 -0
  101. data/lib/evil_faker/data/groups/payloads_all_the_things/injection/nosql.txt +26 -0
  102. data/lib/evil_faker/data/groups/payloads_all_the_things/injection/open_redirect.txt +305 -0
  103. data/lib/evil_faker/data/groups/payloads_all_the_things/injection/script.txt +2165 -0
  104. data/lib/evil_faker/data/groups/payloads_all_the_things/injection/sql.txt +1354 -0
  105. data/lib/evil_faker/data/groups/payloads_all_the_things/injection/ssti.txt +105 -0
  106. data/lib/evil_faker/data/groups/payloads_all_the_things/injection/xxe.txt +102 -0
  107. data/lib/evil_faker/data/groups/payloads_all_the_things/routes/admin_interfaces.txt +52 -0
  108. data/lib/evil_faker/groups/email.rb +11 -0
  109. data/lib/evil_faker/groups/emoji.rb +12 -0
  110. data/lib/evil_faker/groups/exploits.rb +13 -0
  111. data/lib/evil_faker/groups/filenames.rb +8 -0
  112. data/lib/evil_faker/groups/headers.rb +12 -0
  113. data/lib/evil_faker/groups/injection.rb +35 -0
  114. data/lib/evil_faker/groups/numeric.rb +11 -0
  115. data/lib/evil_faker/groups/profanity.rb +8 -0
  116. data/lib/evil_faker/groups/reserved.rb +8 -0
  117. data/lib/evil_faker/groups/routes.rb +13 -0
  118. data/lib/evil_faker/groups/rtl.rb +8 -0
  119. data/lib/evil_faker/groups/terminal.rb +8 -0
  120. data/lib/evil_faker/groups/unicode.rb +23 -0
  121. data/lib/evil_faker/groups/zalgo.rb +8 -0
  122. data/lib/evil_faker/source_base.rb +30 -0
  123. data/lib/evil_faker/sources/blns.rb +8 -0
  124. data/lib/evil_faker/sources/fuzzdb.rb +8 -0
  125. data/lib/evil_faker/sources/intruder_payloads.rb +8 -0
  126. data/lib/evil_faker/sources/payloads_all_the_things.rb +8 -0
  127. data/lib/evil_faker/version.rb +5 -0
  128. data/lib/evil_faker.rb +13 -0
  129. data/scripts/blns_build_corpus.rb +159 -0
  130. data/scripts/fuzzdb_build_corpus.rb +166 -0
  131. data/scripts/generate_namespaces.rb +87 -0
  132. data/scripts/intruder_payloads_build_corpus.rb +112 -0
  133. data/scripts/payloads_all_the_things_build_corpus.rb +74 -0
  134. data/sig/evil_faker.rbs +4 -0
  135. metadata +181 -0
@@ -0,0 +1,1125 @@
1
+ accept
2
+ accept-application
3
+ accept-charset
4
+ accepted
5
+ accept-encoding
6
+ accept-encodxng
7
+ accept-language
8
+ accept-ranges
9
+ accept-version
10
+ access-control-allow-credentials
11
+ access-control-allow-headers
12
+ access-control-allow-methods
13
+ access-control-allow-origin
14
+ access-control-expose-headers
15
+ access-control-max-age
16
+ access-control-request-headers
17
+ access-control-request-method
18
+ accesskey
19
+ access-token
20
+ action
21
+ admin
22
+ age
23
+ ajax
24
+ akamai-origin-hop
25
+ allow
26
+ alt-used
27
+ app
28
+ appcookie
29
+ app-env
30
+ app-key
31
+ apply-to-redirect-ref
32
+ appname
33
+ appversion
34
+ atcept-language
35
+ auth
36
+ auth-any
37
+ auth-basic
38
+ auth-digest
39
+ auth-digest-ie
40
+ authentication
41
+ auth-gssneg
42
+ auth-key
43
+ auth-ntlm
44
+ authorization
45
+ auth-password
46
+ auth-realm
47
+ auth-type
48
+ auth-user
49
+ bad-gateway
50
+ bad-request
51
+ bae-env-addr-bcms
52
+ bae-env-addr-bcs
53
+ bae-env-addr-bus
54
+ bae-env-addr-channel
55
+ bae-env-addr-sql-ip
56
+ bae-env-addr-sql-port
57
+ bae-env-ak
58
+ bae-env-appid
59
+ bae-env-sk
60
+ bae-logid
61
+ bar
62
+ base
63
+ base-url
64
+ basic
65
+ bearer-indication
66
+ body-maxlength
67
+ body-truncated
68
+ brief
69
+ browser-user-agent
70
+ cache-control
71
+ cache-info
72
+ case-files
73
+ catalog
74
+ catalog-server
75
+ category
76
+ cert-cookie
77
+ cert-flags
78
+ cert-issuer
79
+ cert-keysize
80
+ cert-secretkeysize
81
+ cert-serialnumber
82
+ cert-server-issuer
83
+ cert-server-subject
84
+ cert-subject
85
+ cf-connecting-ip
86
+ cf-ipcountry
87
+ cf-template-path
88
+ cf-visitor
89
+ ch
90
+ challenge-response
91
+ charset
92
+ chunk-size
93
+ client
94
+ client-address
95
+ clientaddress
96
+ client-bad-request
97
+ client-conflict
98
+ client-error-cannot-access-local-file
99
+ client-error-cannot-connect
100
+ client-error-communication-failure
101
+ client-error-connect
102
+ client-error-invalid-parameters
103
+ client-error-invalid-server-address
104
+ client-error-no-error
105
+ client-error-protocol-failure
106
+ client-error-unspecified-error
107
+ client-expectation-failed
108
+ client-forbidden
109
+ client-gone
110
+ client-ip
111
+ clientip
112
+ client-length-required
113
+ client-method-not-allowed
114
+ client-not-acceptable
115
+ client-not-found
116
+ client-payment-required
117
+ client-precondition-failed
118
+ client-proxy-auth-required
119
+ client-quirk-mode
120
+ client-requested-range-not-possible
121
+ client-request-timeout
122
+ client-request-too-large
123
+ client-request-uri-too-large
124
+ client-unauthorized
125
+ client-unsupported-media-type
126
+ cloudfront-viewer-country
127
+ cloudinary-name
128
+ cloudinary-public-id
129
+ cloudinaryurl
130
+ cloudinary-version
131
+ code
132
+ coming-from
133
+ command
134
+ compress
135
+ conflict
136
+ connection
137
+ connection-type
138
+ contact
139
+ content
140
+ content-disposition
141
+ content-encoding
142
+ content-language
143
+ content-length
144
+ content-location
145
+ content-md5
146
+ content-range
147
+ content-security-policy
148
+ content-security-policy-report-only
149
+ content-type
150
+ content-type-xhtml
151
+ context-path
152
+ continue
153
+ cookie
154
+ cookie2
155
+ cookie-domain
156
+ cookie-httponly
157
+ cookie-parse-raw
158
+ cookie-path
159
+ cookies
160
+ cookie-secure
161
+ cookie-vars
162
+ core-base
163
+ created
164
+ credentials-filepath
165
+ curl
166
+ curl-multithreaded
167
+ custom-header
168
+ custom-secret-header
169
+ dataserviceversion
170
+ date
171
+ debug
172
+ deflate-level-def
173
+ deflate-level-max
174
+ deflate-level-min
175
+ deflate-strategy-def
176
+ deflate-strategy-filt
177
+ deflate-strategy-fixed
178
+ deflate-strategy-huff
179
+ deflate-strategy-rle
180
+ deflate-type-gzip
181
+ deflate-type-raw
182
+ deflate-type-zlib
183
+ delete
184
+ depth
185
+ destination
186
+ destroy
187
+ devblocksproxybase
188
+ devblocksproxyhost
189
+ devblocksproxyssl
190
+ device-stock-ua
191
+ digest
192
+ dir
193
+ dir-name
194
+ dir-resource
195
+ disable-gzip
196
+ dkim-signature
197
+ dnt
198
+ download-attachment
199
+ download-bad-url
200
+ download-bz2
201
+ download-cut-short
202
+ download-e-headers-sent
203
+ download-e-invalid-archive-type
204
+ download-e-invalid-content-type
205
+ download-e-invalid-file
206
+ download-e-invalid-param
207
+ download-e-invalid-request
208
+ download-e-invalid-resource
209
+ download-e-no-ext-mmagic
210
+ download-e-no-ext-zlib
211
+ download-inline
212
+ download-mime-type
213
+ download-no-server
214
+ download-size
215
+ download-status-not-found
216
+ download-status-server-error
217
+ download-status-unauthorized
218
+ download-status-unknown
219
+ download-tar
220
+ download-tgz
221
+ download-url
222
+ download-zip
223
+ e-encoding
224
+ e-header
225
+ e-invalid-param
226
+ e-malformed-headers
227
+ e-message-type
228
+ enable-gzip
229
+ enable-no-cache-headers
230
+ encoding-stream-flush-full
231
+ encoding-stream-flush-none
232
+ encoding-stream-flush-sync
233
+ env-silla-environment
234
+ env-vars
235
+ e-querystring
236
+ e-request
237
+ e-request-method
238
+ e-request-pool
239
+ e-response
240
+ error
241
+ error-1
242
+ error-2
243
+ error-3
244
+ error-4
245
+ error-formatting-html
246
+ e-runtime
247
+ e-socket
248
+ espo-authorization
249
+ espo-cgi-auth
250
+ etag
251
+ e-url
252
+ eve-charid
253
+ eve-charname
254
+ eve-solarsystemid
255
+ eve-solarsystemname
256
+ eve-trusted
257
+ ex-copy-movie
258
+ expect
259
+ expectation-failed
260
+ expires
261
+ ext
262
+ failed-dependency
263
+ fake-header
264
+ fastly-client-ip
265
+ fb-appid
266
+ fb-secret
267
+ filename
268
+ file-not-found
269
+ files
270
+ files-vars
271
+ fire-breathing-dragon
272
+ foo
273
+ foo-bar
274
+ forbidden
275
+ force-language
276
+ force-local-xhprof
277
+ format
278
+ forwarded
279
+ forwarded-for
280
+ forwarded-for-ip
281
+ forwarded-proto
282
+ from
283
+ fromlink
284
+ front-end-https
285
+ gateway-interface
286
+ gateway-time-out
287
+ get
288
+ get-vars
289
+ givenname
290
+ global-all
291
+ global-cookie
292
+ global-get
293
+ global-post
294
+ gone
295
+ google-code-project-hosting-hook-hmac
296
+ gzip-level
297
+ h0st
298
+ head
299
+ header
300
+ header-lf
301
+ header-status-client-error
302
+ header-status-informational
303
+ header-status-redirect
304
+ header-status-server-error
305
+ header-status-successful
306
+ home
307
+ host
308
+ host~%h:%s
309
+ hosti
310
+ host-liveserver
311
+ host-name
312
+ host-unavailable
313
+ htaccess
314
+ http-accept
315
+ http-accept-encoding
316
+ http-accept-language
317
+ http-authorization
318
+ http-connection
319
+ http-cookie
320
+ http-host
321
+ http-phone-number
322
+ http-referer
323
+ https
324
+ https-from-lb
325
+ https-keysize
326
+ http_sm_authdirname
327
+ http_sm_authdirnamespace
328
+ http_sm_authdiroid
329
+ http_sm_authdirserver
330
+ http_sm_authreason
331
+ http_sm_authtype
332
+ http_sm_dominocn
333
+ http_sm_realm
334
+ http_sm_realmoid
335
+ http_sm_sdomain
336
+ http_sm_serveridentityspec
337
+ http_sm_serversessionid
338
+ http_sm_serversessionspec
339
+ http_sm_sessiondrift
340
+ http_sm_timetoexpire
341
+ http_sm_transactionid
342
+ http_sm_universalid
343
+ http_sm_user
344
+ http_sm_userdn
345
+ http_sm_usermsg
346
+ https-secretkeysize
347
+ https-server-issuer
348
+ https-server-subject
349
+ http-url
350
+ http-user-agent
351
+ if
352
+ if-match
353
+ if-modified-since
354
+ if-modified-since-version
355
+ if-none-match
356
+ if-posted-before
357
+ if-range
358
+ if-unmodified-since
359
+ if-unmodified-since-version
360
+ image
361
+ images
362
+ incap-client-ip
363
+ info
364
+ info-download-size
365
+ info-download-time
366
+ info-return-code
367
+ info-total-request-stat
368
+ info-total-response-stat
369
+ insufficient-storage
370
+ internal-server-error
371
+ ipresolve-any
372
+ ipresolve-v4
373
+ ipresolve-v6
374
+ ischedule-version
375
+ iv-groups
376
+ iv-user
377
+ jenkins
378
+ keep-alive
379
+ kiss-rpc
380
+ large-allocation
381
+ last-event-id
382
+ last-modified
383
+ length-required
384
+ link
385
+ local-addr
386
+ local-content-sha1
387
+ local-dir
388
+ location
389
+ locked
390
+ lock-token
391
+ mail
392
+ max-conn
393
+ maxdataserviceversion
394
+ max-forwards
395
+ max-request-size
396
+ max-uri-length
397
+ message
398
+ message-b
399
+ meth-
400
+ meth-acl
401
+ meth-baseline-control
402
+ meth-checkin
403
+ meth-checkout
404
+ meth-connect
405
+ meth-copy
406
+ meth-delete
407
+ meth-get
408
+ meth-head
409
+ meth-label
410
+ meth-lock
411
+ meth-merge
412
+ meth-mkactivity
413
+ meth-mkcol
414
+ meth-mkworkspace
415
+ meth-move
416
+ method
417
+ method-not-allowed
418
+ meth-options
419
+ meth-post
420
+ meth-propfind
421
+ meth-proppatch
422
+ meth-put
423
+ meth-report
424
+ meth-trace
425
+ meth-uncheckout
426
+ meth-unlock
427
+ meth-update
428
+ meth-version-control
429
+ mimetype
430
+ modauth
431
+ mode
432
+ mod-env
433
+ mod-rewrite
434
+ mod-security-message
435
+ module-class
436
+ module-class-path
437
+ module-name
438
+ moved-permanently
439
+ moved-temporarily
440
+ ms-asprotocolversion
441
+ msg-none
442
+ msg-request
443
+ msg-response
444
+ msisdn
445
+ multipart-boundary
446
+ multiple-choices
447
+ multi-status
448
+ my-header
449
+ mysqlport
450
+ native-sockets
451
+ nl
452
+ no-content
453
+ non-authoritative
454
+ nonce
455
+ not-acceptable
456
+ not-exists
457
+ not-extended
458
+ not-found
459
+ notification-template
460
+ not-implemented
461
+ not-modified
462
+ oc-chunked
463
+ ocs-apirequest
464
+ ok
465
+ on-behalf-of
466
+ onerror-continue
467
+ onerror-die
468
+ onerror-return
469
+ opencart
470
+ options
471
+ organizer
472
+ origin
473
+ originator
474
+ origin~https://%s.%h
475
+ orig_path_info
476
+ overwrite
477
+ params-allow-comma
478
+ params-allow-failure
479
+ params-default
480
+ params-get-catid
481
+ params-get-currentday
482
+ params-get-disposition
483
+ params-get-downwards
484
+ params-get-givendate
485
+ params-get-lang
486
+ params-get-type
487
+ params-raise-error
488
+ partial-content
489
+ passkey
490
+ password
491
+ path
492
+ path-base
493
+ path-info
494
+ path-themes
495
+ path-translated
496
+ payment-required
497
+ pc-remote-addr
498
+ phone-number
499
+ php
500
+ php-auth-pw
501
+ php-auth-user
502
+ phpthreads
503
+ pink-pony
504
+ port
505
+ portsensor-auth
506
+ post
507
+ post-error
508
+ post-files
509
+ postredir-301
510
+ postredir-302
511
+ postredir-all
512
+ post-vars
513
+ pragma
514
+ pragma-no-cache
515
+ precondition-failed
516
+ prefer
517
+ processing
518
+ profile
519
+ protocol
520
+ protocols
521
+ proxy
522
+ proxy-agent
523
+ proxy-authenticate
524
+ proxy-authentication-required
525
+ proxy-authorization
526
+ proxy-connection
527
+ proxy-host
528
+ proxy-http
529
+ proxy-http-1-0
530
+ proxy-password
531
+ proxy-port
532
+ proxy-pwd
533
+ proxy-request-fulluri
534
+ proxy-socks4
535
+ proxy-socks4a
536
+ proxy-socks5
537
+ proxy-socks5-hostname
538
+ proxy-url
539
+ proxy-user
540
+ public-key-pins
541
+ public-key-pins-report-only
542
+ pull
543
+ put
544
+ query-string
545
+ querystring
546
+ querystring-type-array
547
+ querystring-type-bool
548
+ querystring-type-float
549
+ querystring-type-int
550
+ querystring-type-object
551
+ querystring-type-string
552
+ range
553
+ range-not-satisfiable
554
+ raw-post-data
555
+ read-state-begin
556
+ read-state-body
557
+ read-state-headers
558
+ real-ip
559
+ real-method
560
+ reason
561
+ reason-phrase
562
+ recipient
563
+ redirect
564
+ redirected-accept-language
565
+ redirect-found
566
+ redirection-found
567
+ redirection-multiple-choices
568
+ redirection-not-modified
569
+ redirection-permanent
570
+ redirection-see-other
571
+ redirection-temporary
572
+ redirection-unused
573
+ redirection-use-proxy
574
+ redirect-perm
575
+ redirect-post
576
+ redirect-problem-withoutwww
577
+ redirect-problem-withwww
578
+ redirect-proxy
579
+ redirect-temp
580
+ ref
581
+ referer
582
+ referer~http://%s.%h/
583
+ referrer
584
+ referrer-policy
585
+ refferer
586
+ refresh
587
+ remix-hash
588
+ remote-addr
589
+ remote-host
590
+ remote-host-wp
591
+ remote-user
592
+ remote-userhttps
593
+ report-to
594
+ request
595
+ request2-tests-base-url
596
+ request2-tests-proxy-host
597
+ request-entity-too-large
598
+ request-error
599
+ request-error-file
600
+ request-error-gzip-crc
601
+ request-error-gzip-data
602
+ request-error-gzip-method
603
+ request-error-gzip-read
604
+ request-error-proxy
605
+ request-error-redirects
606
+ request-error-response
607
+ request-error-url
608
+ request-http-ver-1-0
609
+ request-http-ver-1-1
610
+ request-mbstring
611
+ request-method
612
+ request-method-
613
+ request-method-delete
614
+ request-method-get
615
+ request-method-head
616
+ request-method-options
617
+ request-method-post
618
+ request-method-put
619
+ request-method-trace
620
+ request-time-out
621
+ request-timeout
622
+ requesttoken
623
+ __requesturi
624
+ request-uri
625
+ request-uri-too-large
626
+ request-vars
627
+ __requestverb
628
+ reset-content
629
+ response
630
+ rest-key
631
+ rest-sign
632
+ retry-after
633
+ returned-error
634
+ rlnclientipaddr
635
+ root
636
+ safe-ports-list
637
+ safe-ports-ssl-list
638
+ schedule-reply
639
+ scheme
640
+ script-name
641
+ secretkey
642
+ sec-websocket-accept
643
+ sec-websocket-extensions
644
+ sec-websocket-key
645
+ sec-websocket-key1
646
+ sec-websocket-key2
647
+ sec-websocket-origin
648
+ sec-websocket-protocol
649
+ sec-websocket-version
650
+ see-other
651
+ self
652
+ send-x-frame-options
653
+ server
654
+ server-bad-gateway
655
+ server-error
656
+ server-gateway-timeout
657
+ server-internal
658
+ server-name
659
+ server-not-implemented
660
+ server-port
661
+ server-port-secure
662
+ server-protocol
663
+ server-service-unavailable
664
+ server-software
665
+ server-unsupported-version
666
+ server-vars
667
+ server-varsabantecart
668
+ service-unavailable
669
+ session-id-tag
670
+ session-vars
671
+ set-cookie
672
+ set-cookie2
673
+ shib-
674
+ shib-application-id
675
+ shib-identity-provider
676
+ shib-logouturl
677
+ shopilex
678
+ slug
679
+ sn
680
+ soapaction
681
+ socket-connection-err
682
+ socketlog
683
+ somevar
684
+ sourcemap
685
+ sp-client
686
+ sp-host
687
+ ssl
688
+ ssl-https
689
+ ssl-offloaded
690
+ ssl-session-id
691
+ sslsessionid
692
+ ssl-version-any
693
+ status
694
+ status-
695
+ status-403
696
+ status-403-admin-del
697
+ status-404
698
+ status-bad-request
699
+ status-code
700
+ status-forbidden
701
+ status-ok
702
+ status-platform-403
703
+ strict-transport-security
704
+ str-match
705
+ success-accepted
706
+ success-created
707
+ success-no-content
708
+ success-non-authoritative
709
+ success-ok
710
+ success-partial-content
711
+ success-reset-content
712
+ support
713
+ support-encodings
714
+ support-events
715
+ support-magicmime
716
+ support-requests
717
+ support-sslrequests
718
+ surrogate-capability
719
+ switching-protocols
720
+ te
721
+ temporary-redirect
722
+ test
723
+ test-config
724
+ test-server-path
725
+ test-something-anything
726
+ ticket
727
+ time-out
728
+ timeout
729
+ timing-allow-origin
730
+ title
731
+ tk
732
+ tmp
733
+ token
734
+ trailer
735
+ transfer-encoding
736
+ translate
737
+ transport-err
738
+ true-client-ip
739
+ ua
740
+ ua-color
741
+ ua-cpu
742
+ ua-os
743
+ ua-pixels
744
+ ua-resolution
745
+ ua-voice
746
+ unauthorized
747
+ unencoded-url
748
+ unit-test-mode
749
+ unless-modified-since
750
+ unprocessable-entity
751
+ unsupported-media-type
752
+ upgrade
753
+ upgrade-insecure-requests
754
+ upgrade-required
755
+ upload-default-chmod
756
+ uri
757
+ url
758
+ url-from-env
759
+ url-join-path
760
+ url-join-query
761
+ url-replace
762
+ url-sanitize-path
763
+ url-strip-
764
+ url-strip-all
765
+ url-strip-auth
766
+ url-strip-fragment
767
+ url-strip-pass
768
+ url-strip-path
769
+ url-strip-port
770
+ url-strip-query
771
+ url-strip-user
772
+ use-gzip
773
+ use-proxy
774
+ user
775
+ user-agent
776
+ useragent
777
+ user-agent-via
778
+ useragent-via
779
+ user-email
780
+ user-id
781
+ user-mail
782
+ user-name
783
+ user-photos
784
+ util
785
+ variant-also-varies
786
+ vary
787
+ verbose
788
+ verbose-throttle
789
+ verify-cert
790
+ version
791
+ version-1-0
792
+ version-1-1
793
+ version-any
794
+ versioncode
795
+ version-none
796
+ version-not-supported
797
+ via
798
+ viad
799
+ wap-connection
800
+ warning
801
+ webodf-member-id
802
+ webodf-session-id
803
+ webodf-session-revision
804
+ web-server-api
805
+ work-directory
806
+ www-address
807
+ www-authenticate
808
+ x
809
+ x-
810
+ x-aastra-expmod1
811
+ x-aastra-expmod2
812
+ x-aastra-expmod3
813
+ x-accel-mapping
814
+ x-access-token
815
+ x-advertiser-id
816
+ x-ajax-real-method
817
+ x-alto-ajax-keyz
818
+ x-amz-date
819
+ x-amzn-remapped-host
820
+ x-amz-website-redirect-location
821
+ x-api-key
822
+ x-api-signature
823
+ x-api-timestamp
824
+ x-apitoken
825
+ x-apple-client-application
826
+ x-apple-store-front
827
+ x-arr-log-id
828
+ x-arr-ssl
829
+ x-att-deviceid
830
+ x-authentication
831
+ x-authentication-key
832
+ x-auth-key
833
+ x-auth-mode
834
+ x-authorization
835
+ xauthorization
836
+ x-auth-password
837
+ x-auth-service-provider
838
+ x-auth-token
839
+ x-auth-user
840
+ x-auth-userid
841
+ x-auth-username
842
+ x-avantgo-screensize
843
+ x-azc-remote-addr
844
+ x-bear-ajax-request
845
+ x-bluecoat-via
846
+ x-bolt-phone-ua
847
+ x-browser-height
848
+ x-browser-width
849
+ x-cascade
850
+ x-cept-encoding
851
+ x-cf-url
852
+ x-chrome-extension
853
+ x-cisco-bbsm-clientip
854
+ x-client-host
855
+ x-client-id
856
+ x-client-ip
857
+ x-clientip
858
+ x-client-key
859
+ x-client-os
860
+ x-client-os-ver
861
+ x-cluster-client-ip
862
+ x-codeception-codecoverage
863
+ x-codeception-codecoverage-config
864
+ x-codeception-codecoverage-debug
865
+ x-codeception-codecoverage-suite
866
+ x-collect-coverage
867
+ x-coming-from
868
+ x-confirm-delete
869
+ x-content-type
870
+ x-content-type-options
871
+ x-credentials-request
872
+ x-csrf-crumb
873
+ x-csrf-token
874
+ x-csrftoken
875
+ x-cuid
876
+ x-custom
877
+ x-dagd-proxy
878
+ x-davical-testcase
879
+ x-dcmguid
880
+ x-debug-test
881
+ x-device-user-agent
882
+ x-dialog
883
+ x-dns-prefetch-control
884
+ x-dokuwiki-do
885
+ x-do-not-track
886
+ x-drestcg
887
+ x-dsid
888
+ x-elgg-apikey
889
+ x-elgg-hmac
890
+ x-elgg-hmac-algo
891
+ x-elgg-nonce
892
+ x-elgg-posthash
893
+ x-elgg-posthash-algo
894
+ x-elgg-time
895
+ x-em-uid
896
+ x-enable-coverage
897
+ x-environment-override
898
+ x-expected-entity-length
899
+ x-experience-api-version
900
+ x-fb-user-remote-addr
901
+ x-file-id
902
+ x-file-name
903
+ x-filename
904
+ x-file-resume
905
+ x-file-size
906
+ x-file-type
907
+ x-firelogger
908
+ x-fireloggerauth
909
+ x-firephp-version
910
+ x-flash-version
911
+ x-flx-consumer-key
912
+ x-flx-consumer-secret
913
+ x-flx-redirect-url
914
+ x-foo
915
+ x-foo-bar
916
+ x-forwarded
917
+ x-forwarded-by
918
+ x-forwarded-for
919
+ x-forwarded-for-original
920
+ x-forwarded-host
921
+ x-forwarded-host~%s.%h
922
+ x-forwarded-port
923
+ x-forwarded-proto
924
+ x-forwarded-protocol
925
+ x-forwarded-scheme
926
+ x-forwarded-server
927
+ x-forwarded-server~%s.%h
928
+ x-forwarded-ssl
929
+ x-forwarder-for
930
+ x-forward-for
931
+ x-forward-proto
932
+ x-from
933
+ x-gb-shared-secret
934
+ x-geoip-country
935
+ x-get-checksum
936
+ x-helpscout-event
937
+ x-helpscout-signature
938
+ x-hgarg-
939
+ x-host
940
+ x-http-destinationurl
941
+ x-http-host-override
942
+ x-http-method
943
+ x-http-method-override
944
+ x-http-path-override
945
+ x-https
946
+ x-http-status-code-override
947
+ x-htx-agent
948
+ x-huawei-userid
949
+ x-hub-signature
950
+ x-if-unmodified-since
951
+ x-imbo-test-config
952
+ x-insight
953
+ x-ip
954
+ x-ip-trail
955
+ x-iwproxy-nesting
956
+ x-jphone-color
957
+ x-jphone-display
958
+ x-jphone-geocode
959
+ x-jphone-msname
960
+ x-jphone-uid
961
+ x-json
962
+ x-kaltura-remote-addr
963
+ x-known-signature
964
+ x-known-username
965
+ x-litmus
966
+ x-litmus-second
967
+ x-locking
968
+ x-machine
969
+ x-mandrill-signature
970
+ x-method-override
971
+ x-mobile-gateway
972
+ x-mobile-ua
973
+ x-mosso-dt
974
+ x-moz
975
+ x-msisdn
976
+ x-ms-policykey
977
+ x-myqee-system-debug
978
+ x-myqee-system-hash
979
+ x-myqee-system-isadmin
980
+ x-myqee-system-isrest
981
+ x-myqee-system-pathinfo
982
+ x-myqee-system-project
983
+ x-myqee-system-rstr
984
+ x-myqee-system-time
985
+ x-network-info
986
+ x-nfsn-https
987
+ x-ning-request-uri
988
+ x-nokia-bearer
989
+ x-nokia-connection-mode
990
+ x-nokia-gateway-id
991
+ x-nokia-ipaddress
992
+ x-nokia-msisdn
993
+ x-nokia-wia-accept-original
994
+ x-nokia-wtls
995
+ x-nuget-apikey
996
+ x-oc-mtime
997
+ xonnection
998
+ x-opera-info
999
+ x-operamini-features
1000
+ x-operamini-phone
1001
+ x-operamini-phone-ua
1002
+ x-options
1003
+ x-orange-id
1004
+ x-orchestra-scheme
1005
+ x-orig-client
1006
+ x-original-host
1007
+ x-original-http-command
1008
+ x-originally-forwarded-for
1009
+ x-originally-forwarded-proto
1010
+ x-original-remote-addr
1011
+ x-original-url
1012
+ x-original-url~/%s
1013
+ x-original-user-agent
1014
+ x-originating-ip
1015
+ x-os-prefs
1016
+ x-overlay
1017
+ x-pagelet-fragment
1018
+ x-password
1019
+ xpdb-debugger
1020
+ x-phabricator-csrf
1021
+ x-phpbb-using-plupload
1022
+ x-pjax
1023
+ x-pjax-container
1024
+ x-prototype-version
1025
+ xproxy
1026
+ x-proxy-url
1027
+ x-pswd
1028
+ x-purpose
1029
+ x-qafoo-profiler
1030
+ x-real-ip
1031
+ x-remote-addr
1032
+ x-remote-protocol
1033
+ x-render-partial
1034
+ x-request
1035
+ x-requested-with
1036
+ x-request-id
1037
+ x-request-signature
1038
+ x-request-start
1039
+ x-request-timestamp
1040
+ x-response-format
1041
+ x-rest-cors
1042
+ x-rest-password
1043
+ x-rest-username
1044
+ x-rewrite-url
1045
+ x-rewrite-url~/%s
1046
+ xroxy-connection
1047
+ x-sakura-forwarded-for
1048
+ x-scalr-auth-key
1049
+ x-scalr-auth-token
1050
+ x-scalr-env-id
1051
+ x-scheme
1052
+ x-screen-height
1053
+ x-screen-width
1054
+ x-sendfile-type
1055
+ x-serialize
1056
+ x-serial-number
1057
+ x-server-id
1058
+ x-server-name
1059
+ x-server-port
1060
+ x-signature
1061
+ x-sina-proxyuser
1062
+ x-skyfire-phone
1063
+ x-skyfire-screen
1064
+ x-ssl
1065
+ x-subdomain
1066
+ x-te
1067
+ x-teamsite-preremap
1068
+ x-test-session-id
1069
+ x-tine20-jsonkey
1070
+ x-tine20-request-type
1071
+ x-tomboy-client
1072
+ x-tor
1073
+ x-twilio-signature
1074
+ x-ua-device
1075
+ x-ucbrowser-device-ua
1076
+ x-uidh
1077
+ x-unique-id
1078
+ x-uniquewcid
1079
+ x-up-calling-line-id
1080
+ x-update
1081
+ x-update-range
1082
+ x-up-devcap-iscolor
1083
+ x-up-devcap-post-charset
1084
+ x-up-devcap-screendepth
1085
+ x-up-devcap-screenpixels
1086
+ x-upload-maxresolution
1087
+ x-upload-name
1088
+ x-upload-size
1089
+ x-upload-type
1090
+ x-up-subno
1091
+ x-url-scheme
1092
+ x-user
1093
+ x-user-agent
1094
+ x-username
1095
+ x-varnish
1096
+ x-verify-credentials-authorization
1097
+ x-vodafone-3gpdpcontext
1098
+ x-wap-clientid
1099
+ x-wap-client-sdu-size
1100
+ x-wap-gateway
1101
+ x-wap-network-client-ip
1102
+ x-wap-network-client-msisdn
1103
+ x-wap-profile
1104
+ x-wap-proxy-cookie
1105
+ x-wap-session-id
1106
+ x-wap-tod
1107
+ x-wap-tod-coded
1108
+ x-whatever
1109
+ x-wikimedia-debug
1110
+ x-wp-nonce
1111
+ x-wp-pjax-prefetch
1112
+ x-ws-api-key
1113
+ x-xc-schema-version
1114
+ x-xhprof-debug
1115
+ x-xhr-referer
1116
+ x-xmlhttprequest
1117
+ x-xpid
1118
+ xxx-real-ip
1119
+ xxxxxxxxxxxxxxx
1120
+ x-zikula-ajax-token
1121
+ x-zotero-version
1122
+ x-ztgo-bearerinfo
1123
+ y
1124
+ zotero-api-version
1125
+ zotero-write-token