info/big-list-of-naughty-strings
1
0
Fork 0
mirror of https://github.com/minimaxir/big-list-of-naughty-strings.git synced 2025-09-25 05:12:14 +02:00
Code Issues Releases Wiki Activity

update JSON to latest

Browse Source
This commit is contained in:
Max Woolf
2015-08-10 19:07:24 -07:00
parent a564fe3113
commit d10f848922
3 changed files with 45 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files

52
blns.json
View File

@@ -1,9 +1,11 @@
[ [
"",
"undefined", "undefined",
"null", "null",
"NULL", "NULL",
"nil", "nil",
"NIL", "NIL",
"0",
"1", "1",
"1.00", "1.00",
"$1.00", "$1.00",
@@ -21,10 +23,24 @@
"1/0", "1/0",
"0/0", "0/0",
"0.00", "0.00",
"0..0",
".",
"0.0.0",
"0,00",
"0,,0",
",",
"0,0,0",
"--1",
"-",
"-.",
"-,",
"999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999", "999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999",
"NaN",
"Infinity",
"-Infinity",
",./;'[]\\-=", ",./;'[]\\-=",
"<>?:\"{}|_+", "<>?:\"{}|_+",
"!@#$%^&*()", "!@#$%^&*()`",
"Ω≈ç√∫˜µ≤≥÷", "Ω≈ç√∫˜µ≤≥÷",
"åß∂ƒ©˙∆˚¬…æ", "åß∂ƒ©˙∆˚¬…æ",
"œ∑´®†¥¨ˆøπ“‘", "œ∑´®†¥¨ˆøπ“‘",
@@ -50,7 +66,7 @@
"사회과학원 어학연구소", "사회과학원 어학연구소",
"社會科學院語學研究所", "社會科學院語學研究所",
"울란바토르", "울란바토르",
"𠜎𠜱𠝹𠱓𠱸𠲖𠳏", "𠜎𠜱𠝹𠱓𠱸𠲖𠳏",
"ヽ༼ຈل͜ຈ༽ﾉ ヽ༼ຈل͜ຈ༽ﾉ ", "ヽ༼ຈل͜ຈ༽ﾉ ヽ༼ຈل͜ຈ༽ﾉ ",
"(｡◕ ∀ ◕｡)", "(｡◕ ∀ ◕｡)",
"｀ｨ(´∀｀∩", "｀ｨ(´∀｀∩",
@@ -93,14 +109,24 @@
"Z̮̞̠͙͔ͅḀ̗̞͈̻̗Ḷ͙͎̯̹̞͓G̻O̭̗̮", "Z̮̞̠͙͔ͅḀ̗̞͈̻̗Ḷ͙͎̯̹̞͓G̻O̭̗̮",
"˙ɐnbᴉlɐ ɐuƃɐɯ ǝɹolop ʇǝ ǝɹoqɐl ʇn ʇunpᴉpᴉɔuᴉ ɹodɯǝʇ poɯsnᴉǝ op pǝs 'ʇᴉlǝ ƃuᴉɔsᴉdᴉpɐ ɹnʇǝʇɔǝsuoɔ 'ʇǝɯɐ ʇᴉs ɹolop ɯnsdᴉ ɯǝɹo˥", "˙ɐnbᴉlɐ ɐuƃɐɯ ǝɹolop ʇǝ ǝɹoqɐl ʇn ʇunpᴉpᴉɔuᴉ ɹodɯǝʇ poɯsnᴉǝ op pǝs 'ʇᴉlǝ ƃuᴉɔsᴉdᴉpɐ ɹnʇǝʇɔǝsuoɔ 'ʇǝɯɐ ʇᴉs ɹolop ɯnsdᴉ ɯǝɹo˥",
"00˙Ɩ$-", "00˙Ɩ$-",
"<script>alert('hi')</script>", "<script>alert('XSS')</script>",
"<img src=x onerror=alert('hi') />", "<img src=x onerror=alert('XSS') />",
"<svg><script>0<1>alert('XSS')</script>", "<svg><script>0<1>alert('XSS')</script> ",
"\"><script>alert(document.title)</script>",
"'><script>alert(document.title)</script>",
"><script>alert(document.title)</script>",
"</script><script>alert(document.title)</script>",
"< / script >< script >alert(document.title)< / script >",
" onfocus=alert(document.title) autofocus ",
"\" onfocus=alert(document.title) autofocus ",
"' onfocus=alert(document.title) autofocus ",
"＜script＞alert(document.title)＜/script＞",
"<sc<script>ript>alert('XSS')</sc</script>ript>",
"1;DROP TABLE users", "1;DROP TABLE users",
"1'; DROP TABLE users--", "1'; DROP TABLE users--",
"/dev/null; touch /tmp/blns.fail ; echo", "/dev/null; touch /tmp/blns.fail ; echo",
"../../../../../../../../../../../etc/passwd%00", "../../../../../../../../../../../etc/passwd%00",
"../../../../../../../../../../../etc/hosts", "../../../../../../../../../../../etc/hosts",
"() { 0; }; touch /tmp/blns.shellshock1.fail;", "() { 0; }; touch /tmp/blns.shellshock1.fail;",
"() { _; } >_[$($())] { touch /tmp/blns.shellshock2.fail; }" "() { _; } >_[$($())] { touch /tmp/blns.shellshock2.fail; }"
] ]

3
blns.txt
View File

@@ -4,6 +4,9 @@
undefined undefined
null null
NULL
nil
NIL
# Numeric Strings # Numeric Strings
# #

3
scripts/txt_to_json.py
View File

@@ -15,6 +15,9 @@ with open('../blns.txt', 'r') as f:
# remove empty-lines and comments # remove empty-lines and comments
content = [x for x in content if x and not x.startswith('#')] content = [x for x in content if x and not x.startswith('#')]
# insert empty string at end since all are being removed (c.f. jimrandomh)
content.insert(0, "")
with open('../blns.json', 'wb') as f: with open('../blns.json', 'wb') as f:
# write JSON to file; note the ensure_ascii parameter # write JSON to file; note the ensure_ascii parameter