Adam Muntner
|
480f487cbf
|
Update invalid-filenames-microsoft.txt
|
2017-01-16 12:48:39 -05:00 |
|
Adam Muntner
|
d4dfa84417
|
Strings which contain unicode with an "upsidedown" effect (via http://www.upsidedowntext.com)
from minimaxir/big-list-of-naughty-strings
|
2017-01-16 12:44:51 -05:00 |
|
Adam Muntner
|
1e797dcaf3
|
Strings which contain "corrupted" text. The corruption will not appear in non-HTML text, however. (via http://www.eeemo.net)
from minimaxir/big-list-of-naughty-strings
|
2017-01-16 12:44:01 -05:00 |
|
Adam Muntner
|
330b3613f9
|
Strings which contain text that should be rendered RTL if possible (e.g. Arabic, Hebrew)
from minimaxir/big-list-of-naughty-strings/
|
2017-01-16 12:43:14 -05:00 |
|
Adam Muntner
|
0c8789bb6a
|
Update emoji.txt
|
2017-01-16 12:40:55 -05:00 |
|
Adam Muntner
|
7b5e1e92e8
|
Create regionalindicators.txt
from minimaxir/big-list-of-naughty-strings
|
2017-01-16 12:40:31 -05:00 |
|
Adam Muntner
|
7d53ff81f5
|
Create README.md
|
2017-01-16 12:38:32 -05:00 |
|
Adam Muntner
|
5a5b403c1f
|
add unicode files
|
2017-01-16 12:35:19 -05:00 |
|
Adam Muntner
|
df5fd2e3ef
|
Strings which contain Emoji; should be the same behavior as two-byte characters, but not always
from minimaxir/big-list-of-naughty-strings
|
2017-01-16 12:26:04 -05:00 |
|
Adam Muntner
|
9ddc02dcb8
|
Strings which consists of Japanese-style emoticons
from minimaxir/big-list-of-naughty-strings
|
2017-01-16 12:22:46 -05:00 |
|
Adam Muntner
|
594f0894b4
|
Strings which contain two-byte characters: can cause rendering issues or character-length issues
minimaxir/big-list-of-naughty-strings
|
2017-01-16 12:21:34 -05:00 |
|
Adam Muntner
|
9deeda4647
|
Strings which contain misplaced quotation marks; can cause encoding errors
from minimaxir/big-list-of-naughty-strings
|
2017-01-16 12:20:21 -05:00 |
|
Adam Muntner
|
ada2f9308f
|
common unicode symbols (e.g. smart quotes),Subscript/Superscript/Accents, cause rendering issues.
from minimaxir/big-list-of-naughty-strings
|
2017-01-16 12:18:52 -05:00 |
|
Adam Muntner
|
855a9d38de
|
Strings which contain common special ASCII characters (may need to be escaped)
from minimaxir/big-list-of-naughty-string
|
2017-01-16 12:13:32 -05:00 |
|
Adam Muntner
|
374c6ad1c2
|
Rename crlf-notes.txt to README.md
|
2017-01-16 12:11:33 -05:00 |
|
Adam Muntner
|
2f08d13363
|
Strings which can be interpreted as numeric
from minimaxir/big-list-of-naughty-strings
|
2017-01-16 12:04:47 -05:00 |
|
Adam Muntner
|
3b0e33f5ae
|
Update date to 2017, add addtl license
|
2017-01-16 11:42:39 -05:00 |
|
Adam Muntner
|
fb8d7dbbc5
|
Update README.md
|
2017-01-16 11:36:46 -05:00 |
|
Adam Muntner
|
493cc33aa2
|
Update README.md
|
2017-01-16 11:29:57 -05:00 |
|
Adam Muntner
|
f5b606f0e4
|
Update README.md
|
2017-01-16 11:29:02 -05:00 |
|
Adam Muntner
|
e528f450fa
|
Update README.md
|
2017-01-16 11:20:36 -05:00 |
|
Adam Muntner
|
7767fdee50
|
Update README.md
|
2017-01-16 11:07:42 -05:00 |
|
Adam Muntner
|
a2a79b4236
|
Update README.md
|
2017-01-16 11:07:10 -05:00 |
|
Adam Muntner
|
f64b14efaf
|
Update README.md
|
2017-01-16 00:03:20 -05:00 |
|
Adam Muntner
|
da3d4e1fa9
|
Added additional likely method names
|
2017-01-15 23:52:10 -05:00 |
|
Adam Muntner
|
e25608f9fa
|
Merge pull request #161 from elnerd/patch-4
Added TRACK method to http-methods
|
2017-01-15 15:25:42 -05:00 |
|
Adam Muntner
|
abe819f21c
|
Merge pull request #160 from sempf/patch-1
Create json version of debug params
|
2017-01-15 15:24:01 -05:00 |
|
Adam Muntner
|
fa3e68b231
|
Merge pull request #155 from elnerd/patch-3
Patch 3 - added h2-h6 tags
|
2017-01-15 15:23:14 -05:00 |
|
Adam Muntner
|
715977900d
|
Merge pull request #159 from merttasci/patch-1
added 2 style context XSS attacks for LESS
|
2017-01-15 15:22:34 -05:00 |
|
Adam Muntner
|
1e6472ea75
|
Merge pull request #154 from elnerd/patch-2
Create html_attributes.txt
|
2017-01-15 15:21:35 -05:00 |
|
Adam Muntner
|
7b3433f960
|
Merge pull request #147 from GuiOm/master
Add HTML event attributes
|
2017-01-15 15:21:19 -05:00 |
|
El Nerdo
|
9cd7e5a2d0
|
Added TRACK method to http-methods
According to https://www.owasp.org/index.php/Cross_Site_Tracing - the TRACK method is IIS specific variant of TRACE.
|
2016-12-19 11:38:35 +01:00 |
|
Bill Sempf
|
02f6aa2687
|
Create json version of debug params
I like this for AJAXy sites.
|
2016-12-15 10:25:54 -05:00 |
|
Adam Muntner
|
6e3e71822b
|
Delete command-execution-cheatsheat-unix.txt
|
2016-11-15 16:31:53 -05:00 |
|
Mert Tasci
|
6724d78102
|
added 2 style context XSS attacks for LESS
cc: https://twitter.com/merttasci_/status/786878767604043776
|
2016-10-19 14:12:27 +03:00 |
|
Adam Muntner
|
71407d12e0
|
Create README.md
|
2016-10-17 09:06:26 -04:00 |
|
Adam Muntner
|
a07e0fea2f
|
from https://github.com/attackercan/
https://github.com/attackercan/regexp-security-cheatsheet
|
2016-10-17 09:01:36 -04:00 |
|
Adam Muntner
|
22fe7c4b1a
|
Delete README.rb
|
2016-10-17 08:54:04 -04:00 |
|
Adam Muntner
|
e3a9f305b7
|
Update README.rb
|
2016-10-17 08:52:48 -04:00 |
|
Adam Muntner
|
e5b926eadd
|
Update README.rb
|
2016-10-17 08:52:08 -04:00 |
|
Adam Muntner
|
db8c767952
|
Create README.rb
|
2016-10-17 08:51:50 -04:00 |
|
Adam Muntner
|
c4d8de6c78
|
Add PNG IDAT chunk webshell link & cleanup
|
2016-10-16 20:24:55 -04:00 |
|
Adam Muntner
|
837c737b28
|
Tiny php remote os commanding backdoor
Example usage:
http://host/?c=id
|
2016-10-16 15:47:43 -04:00 |
|
Adam Muntner
|
89c59e7d74
|
Update arbitrary redirect docs
|
2016-10-12 03:44:16 -04:00 |
|
Adam Muntner
|
e951c9f277
|
doc page 1.0 for open redirect patterns
|
2016-10-12 03:22:12 -04:00 |
|
Adam Muntner
|
05c9d033fb
|
Arbitrary redirect injection template
|
2016-10-12 02:36:00 -04:00 |
|
Adam Muntner
|
a3768fd2a4
|
Open redirct injection tests
|
2016-10-12 02:12:47 -04:00 |
|
Adam Muntner
|
aaeaf2fbc4
|
Open redirect tests
|
2016-10-12 02:12:10 -04:00 |
|
Adam Muntner
|
55bb18a030
|
Open redirect url patterns
|
2016-10-12 02:08:10 -04:00 |
|
Adam Muntner
|
f38bb3e0df
|
Creating redirection template, more patterns otw
|
2016-10-12 01:42:23 -04:00 |
|