Mirrors/fuzzdb
2
0
Fork 0
mirror of https://github.com/fuzzdb-project/fuzzdb.git synced 2024-11-10 05:24:12 +00:00
Code Issues Projects Releases Packages Wiki Activity

Removed crocodiles

Browse source 
When fuzzing for allowed html tags, some libraries such as OWASP AntiSamy will require a matching closing tag.
Removing the crocodiles from the html tags, it allow you to do the following: <$POS$></$POS$>, and you can use this file to fuzz for valid html tags, and still provide valid html at the same time.
This commit is contained in:
leikarne 2016-09-13 23:52:20 +02:00 committed by GitHub
parent 19071973bc
commit cb7b69a789
1 changed files with 115 additions and 115 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

230
attack/html_js_fuzz/html_tags.txt
View file

@ -1,115 +1,115 @@
<!-- --> !-- --
<!DOCTYPE> !DOCTYPE
<a> a
<abbr> abbr
<acronym> acronym
<address> address
<applet> applet
<area> area
<article> article
<aside> aside
<audio> audio
<b> b
<base> base
<basefont> basefont
<bdo> bdo
<big> big
<blockquote> blockquote
<body> body
<br> br
<button> button
<canvas> canvas
<caption> caption
<center> center
<cite> cite
<code> code
<col> col
<colgroup> colgroup
<command> command
<datalist> datalist
<dd> dd
<del> del
<details> details
<dfn> dfn
<dir> dir
<div> div
<dl> dl
<dt> dt
<em> em
<embed> embed
<fieldset> fieldset
<figcaption> figcaption
<figure> figure
<font> font
<footer> footer
<form> form
<frame> frame
<frameset> frameset
<h1> h1
<head> head
<header> header
<hgroup> hgroup
<hr> hr
<html> html
<i> i
<iframe> iframe
<img> img
<input> input
<ins> ins
<keygen> keygen
<kbd> kbd
<label> label
<legend> legend
<li> li
<link> link
<map> map
<mark> mark
<menu> menu
<meta> meta
<meter> meter
<nav> nav
<noframes> noframes
<noscript> noscript
<object> object
<ol> ol
<optgroup> optgroup
<option> option
<output> output
<p> p
<param> param
<pre> pre
<progress> progress
<q> q
<rp> rp
<rt> rt
<ruby> ruby
<s> s
<samp> samp
<script> script
<section> section
<select> select
<small> small
<source> source
<span> span
<strike> strike
<strong> strong
<style> style
<sub> sub
<summary> summary
<sup> sup
<table> table
<tbody> tbody
<td> td
<textarea> textarea
<tfoot> tfoot
<th> th
<thead> thead
<time> time
<title> title
<tr> tr
<tt> tt
<u> u
<ul> ul
<var> var
<video> video
<xmp> xmp