info/big-list-of-naughty-strings
1
0
Fork 0
mirror of https://github.com/minimaxir/big-list-of-naughty-strings.git synced 2025-09-09 21:50:47 +02:00
Code Issues Releases Wiki Activity

Add file inclusion with null byte exception, and a chrome XSS bypass courtesy of brutelogic

Browse Source
This commit is contained in:
e
2015-08-10 09:19:30 -07:00
parent 3807c125fb
commit cf6ed306d2
2 changed files with 14 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
blns.json
View File

@@ -91,7 +91,10 @@
"00˙Ɩ$-",
"<script>alert('hi')</script>",
"<img src=x onerror=alert('hi') />",
"<svg><script>0<1>alert('XSS')</script>",
"1;DROP TABLE users",
"1'; DROP TABLE users--",
"/dev/null; rm -rf /*; echo"
]
"/dev/null; rm -rf /*; echo",
"../../../../../../../../../../../etc/passwd%00",
"../../../../../../../../../../../etc/hosts"
]

10
blns.txt
View File

@@ -169,6 +169,7 @@ Z̮̞̠͙͔ͅḀ̗̞͈̻̗Ḷ͙͎̯̹̞͓G̻O̭̗̮
<script>alert('hi')</script>
<img src=x onerror=alert('hi') />
<svg><script>0<1>alert('XSS')</script>
# SQL Injection
#
@@ -181,4 +182,11 @@ Z̮̞̠͙͔ͅḀ̗̞͈̻̗Ḷ͙͎̯̹̞͓G̻O̭̗̮
#
# Strings which can cause user to run code on server as a privileged user (c.f. https://news.ycombinator.com/item?id=7665153)
/dev/null; rm -rf /*; echo
/dev/null; rm -rf /*; echo
# File Inclusion
#
# Strings which can cause user to pull in files that should not be a part of a web server
../../../../../../../../../../../etc/passwd%00
../../../../../../../../../../../etc/hosts