info/big-list-of-naughty-strings
1
0
Fork 0
mirror of https://github.com/minimaxir/big-list-of-naughty-strings.git synced 2025-09-25 13:19:15 +02:00
Code Issues Releases Wiki Activity

make formatting more consistent

Browse Source
This commit is contained in:
Max Woolf
2015-08-10 18:58:18 -07:00
parent 3a4375fc16
commit ef23ab616c
1 changed files with 4 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
blns.txt
View File

@@ -183,8 +183,8 @@ Z̮̞̠͙͔ͅḀ̗̞͈̻̗Ḷ͙͎̯̹̞͓G̻O̭̗̮
# #
# Strings which attempt to invoke a benign script injection; shows vulnerability to XSS # Strings which attempt to invoke a benign script injection; shows vulnerability to XSS
<script>alert('hi')</script> <script>alert('XSS')</script>
<img src=x onerror=alert('hi') /> <img src=x onerror=alert('XSS') />
<svg><script>0<1>alert('XSS')</script> <svg><script>0<1>alert('XSS')</script>
"><script>alert(document.title)</script> "><script>alert(document.title)</script>
'><script>alert(document.title)</script> '><script>alert(document.title)</script>
@@ -219,6 +219,7 @@ Z̮̞̠͙͔ͅḀ̗̞͈̻̗Ḷ͙͎̯̹̞͓G̻O̭̗̮
# Known CVEs and Vulnerabilities # Known CVEs and Vulnerabilities
# #
# Strings that test for known vulnerabilities. # Strings that test for known vulnerabilities
() { 0; }; touch /tmp/blns.shellshock1.fail; () { 0; }; touch /tmp/blns.shellshock1.fail;
() { _; } >_[$($())] { touch /tmp/blns.shellshock2.fail; } () { _; } >_[$($())] { touch /tmp/blns.shellshock2.fail; }