Mirrors/fuzzdb
2
0
Fork 0
mirror of https://github.com/fuzzdb-project/fuzzdb.git synced 2025-02-16 08:18:23 +00:00
Code Issues Projects Releases Packages Wiki Activity

Strings which can be accidentally expanded into different strings if evaluated in the wrong context

Browse source 
e.g. used as a printf format string or via Perl or shell eval. Might expose sensitive data from the program doing the interpolation, or might just represent the wrong string.

from minimaxir/big-list-of-naughty-strings
This commit is contained in:
Adam Muntner 2017-01-16 12:55:38 -05:00 • committed by GitHub
parent 80772679c2
commit ecb0850538
1 changed files with 6 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
attack/string-expansion/shell-expansion.txt Normal file
View file

@ -0,0 +1,6 @@
$HOME
$ENV{'HOME'}
%d
%s
{0}
%*.*s