diff --git a/blns.json b/blns.json index 959ef3a..0868191 100644 --- a/blns.json +++ b/blns.json @@ -1,9 +1,11 @@ [ + "", "undefined", "null", - "NULL", - "nil", - "NIL", + "NULL", + "nil", + "NIL", + "0", "1", "1.00", "$1.00", @@ -21,10 +23,24 @@ "1/0", "0/0", "0.00", + "0..0", + ".", + "0.0.0", + "0,00", + "0,,0", + ",", + "0,0,0", + "--1", + "-", + "-.", + "-,", "999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999", + "NaN", + "Infinity", + "-Infinity", ",./;'[]\\-=", "<>?:\"{}|_+", - "!@#$%^&*()", + "!@#$%^&*()`", "Ω≈ç√∫˜µ≤≥÷", "åß∂ƒ©˙∆˚¬…æ", "œ∑´®†¥¨ˆøπ“‘", @@ -50,7 +66,7 @@ "사회과학원 어학연구소", "社會科學院語學研究所", "울란바토르", - "𠜎𠜱𠝹𠱓𠱸𠲖𠳏", + "𠜎𠜱𠝹𠱓𠱸𠲖𠳏", "ヽ༼ຈل͜ຈ༽ノ ヽ༼ຈل͜ຈ༽ノ ", "(。◕ ∀ ◕。)", "`ィ(´∀`∩", @@ -93,14 +109,24 @@ "Z̮̞̠͙͔ͅḀ̗̞͈̻̗Ḷ͙͎̯̹̞͓G̻O̭̗̮", "˙ɐnbᴉlɐ ɐuƃɐɯ ǝɹolop ʇǝ ǝɹoqɐl ʇn ʇunpᴉpᴉɔuᴉ ɹodɯǝʇ poɯsnᴉǝ op pǝs 'ʇᴉlǝ ƃuᴉɔsᴉdᴉpɐ ɹnʇǝʇɔǝsuoɔ 'ʇǝɯɐ ʇᴉs ɹolop ɯnsdᴉ ɯǝɹo˥", "00˙Ɩ$-", - "", - "", - "", + "", + "", + " ", + "\">", + "'>", + ">", + "", + "< / script >< script >alert(document.title)< / script >", + " onfocus=alert(document.title) autofocus ", + "\" onfocus=alert(document.title) autofocus ", + "' onfocus=alert(document.title) autofocus ", + "<script>alert(document.title)</script>", + "ript>alert('XSS')ript>", "1;DROP TABLE users", "1'; DROP TABLE users--", - "/dev/null; touch /tmp/blns.fail ; echo", - "../../../../../../../../../../../etc/passwd%00", - "../../../../../../../../../../../etc/hosts", - "() { 0; }; touch /tmp/blns.shellshock1.fail;", + "/dev/null; touch /tmp/blns.fail ; echo", + "../../../../../../../../../../../etc/passwd%00", + "../../../../../../../../../../../etc/hosts", + "() { 0; }; touch /tmp/blns.shellshock1.fail;", "() { _; } >_[$($())] { touch /tmp/blns.shellshock2.fail; }" -] +] \ No newline at end of file diff --git a/blns.txt b/blns.txt index fb67e98..9ed51ab 100644 --- a/blns.txt +++ b/blns.txt @@ -4,6 +4,9 @@ undefined null +NULL +nil +NIL # Numeric Strings # diff --git a/scripts/txt_to_json.py b/scripts/txt_to_json.py index 81be18b..6b4cc7f 100644 --- a/scripts/txt_to_json.py +++ b/scripts/txt_to_json.py @@ -15,6 +15,9 @@ with open('../blns.txt', 'r') as f: # remove empty-lines and comments content = [x for x in content if x and not x.startswith('#')] + # insert empty string at end since all are being removed (c.f. jimrandomh) + content.insert(0, "") + with open('../blns.json', 'wb') as f: # write JSON to file; note the ensure_ascii parameter